CVE-2008-2887: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2820

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-2818

CVE-2008-2818 is a directory traversal vulnerability in Easy-Clanpage 3.0 b1 that allows remote attackers to include and execute arbitrary local files by supplying a .. in the section parameter of the default URI. The core issue is uncontrolled file path traversal, enabling partial confidentialit...

CVE-2008-2306: Undefined Security Weakness

Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTIONSHELLEXECUTEHIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files...

CVE-2008-2699: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Galatolo WebManager GWM 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in 1 the plugin parameter to admin/plugins.php or 2 the com parameter to index.php...

CVE-2008-2695: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-1106: Improper Authentication

The management interface in Akamai Client formerly Red Swoosh 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains 1 no Referer header, or 2 a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site...

CVE-2008-1770: Improper Control of Generation of Code

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...

CVE-2008-2459: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2008-2353: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...

CVE-2008-2355: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

CVE-2008-2091: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-2081: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-1908: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...

CVE-2008-1642: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-1553: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the to parameter...

CVE-2008-1555: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...

CVE-2008-1537: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pbinc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC...

CVE-2008-1512: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...