CVE-2008-1409: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to 1 index.php, 2 editpassword.php, and 3 avatar.php in usercp/; 4 custompage.php; 5...

CVE-2008-1231: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. dot dot in the editor parameter...

CVE-2008-0840: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0812: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...

CVE-2008-0745: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0609: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0559: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0545: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 uri parameter to a yui-menu.tpl.php, b simple.tpl.php, and c advanced.tpl.php in dispatcher/framework/; and the 2 page parameter to d...

CVE-2008-0501: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagecourante parameter to the top-level URI...

CVE-2008-0488: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter...

CVE-2008-0458: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...

CVE-2008-0357: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2007-6686

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller...

CVE-2008-0332: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2007-6686: Undefined Security Weakness

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller...

CVE-2008-0251: Improper Input Validation

Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors...

CVE-2008-0233: Undefined Security Weakness

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg...

CVE-2007-6648: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2007-6581: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the globallang parameter to 1 headeralbum.php, 2 headerblog.php, or 3 headergroup.php; or 4 adminheaderalbum.php, 5 adminheaderblog.php, or 6...

CVE-2007-6475: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...