CVE-2009-1445: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...

CVE-2008-2185: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5890: Undefined Security Weakness

Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via the DatabaseType parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2003-1373: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. dot dot sequences followed by NULL %00 characters in CGI parameters, as demonstrated using the lang parameter in prefs.php...

CVE-2007-1896: Undefined Security Weakness

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. dot dot and trailing %00 NULL in a mymsroot cookie...

CVE-2007-1636: Undefined Security Weakness

Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. dot dot sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header...

CVE-2007-1042: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in news.php in Xpression News X-News 1.0.1, when magicquotesgpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter. NOTE: the provenance of this information is unknown;...

CVE-2007-1040: Undefined Security Weakness

Directory traversal vulnerability in archives.php in Xpression News X-News 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter...

CVE-2006-6938: Undefined Security Weakness

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter...

CVE-2006-6175: Undefined Security Weakness

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. dot dot sequence in the view parameter...

CTB arbitrary file include vulnerability-vulnerability warning-the black bar safety net

Introduction CTBChina Text Bulletinthe Forum is a free domestic text Forum. Since the code is relatively Mature and the text of the Forum of the convenient features used in the country more widely. Previously had a rough turn of the change the forum code found aXSSvulnerabilities, due to school...

Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

CVE-2006-1762: Undefined Security Weakness

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...

CVE-2005-4467: Undefined Security Weakness

Directory traversal vulnerability in helptextvars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the PGVBASEDIRECTORY parameter...

CVE-2005-4302: Undefined Security Weakness

Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter...

CVE-2005-3323: Undefined Security Weakness

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...

CVE-2004-2485: Undefined Security Weakness

Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors...

CVE-2005-3281: Undefined Security Weakness

Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter...

CVE-2005-3251: Undefined Security Weakness

Directory traversal vulnerability in the gallery script in Gallery 2.0 G2 allows remote attackers to read or include arbitrary files via ".." sequences in the g2itemId parameter...

CVE-2005-2001: Undefined Security Weakness

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...