CVE-2007-2104: Undefined Security Weakness

Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the themeurl parameter to 1 index.php, 2 page.php, 3 search.php, 4 single.php, and 5 archives.php...

CVE-2007-2105: Undefined Security Weakness

Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the adminskin parameter...

CVE-2007-2008: Undefined Security Weakness

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2007-1933

CVE-2007-1933 describes multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 that allow remote attackers to include and execute arbitrary local files through a ".." in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php. The root cause is directory traversal le...

CVE-2007-1928: Undefined Security Weakness

Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the menu parameter...

CVE-2007-1851: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the class parameter to 1 Controllerv4.php or 2 Controllerv5.php...

CVE-2007-1720: Undefined Security Weakness

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

CVE-2007-1455: Undefined Security Weakness

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...

CVE-2006-7134

Unrestricted file upload vulnerability in mainuser.php in Upload Tool for PHP 1.0 allows remote attackers to upload and execute arbitrary files with executable extensions such as .php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-7134: Undefined Security Weakness

Unrestricted file upload vulnerability in mainuser.php in Upload Tool for PHP 1.0 allows remote attackers to upload and execute arbitrary files with executable extensions such as .php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2007-0987: Undefined Security Weakness

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot, or an absolute pathname, in the n parameter...

CVE-2007-0337

CVE-2007-0337 describes a directory traversal in KGB 1.9 and earlier where sesskglogadmin.php can include and execute arbitrary local files via a .. in the skinnn parameter. The attack path involves invoking kg.php with a postek parameter containing PHP code, which is injected into a file in the ...

CVE-2006-6838: Undefined Security Weakness

Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

PT-2006-7435 · Rediff · Rediff Bol Downloader Activex

Name of the Vulnerable Software and Affected Versions: Rediff Bol Downloader ActiveX OCX control affected versions not specified Description: The issue allows remote attackers to execute arbitrary files and obtain sensitive information, such as usernames and pathnames, by providing a URL in the u...

GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH

The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...

CVE-2006-6390: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the configdbtype parameter to 1 categories.php, 2 couriers.php, 3...

CVE-2006-5658: Undefined Security Weakness

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...

CVE-2006-5528: Undefined Security Weakness

Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5498: Undefined Security Weakness

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...