CVE-2013-3654

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SCCheckError.php and data/class/SCFormParam.php, a different vulnerability than CVE-2013-3650...

Directory traversal

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SCCheckError.php and data/class/SCFormParam.php, a different vulnerability than CVE-2013-3650...

CVE-2013-3654

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SCCheckError.php and data/class/SCFormParam.php, a different vulnerability than CVE-2013-3650...

CVE-2013-3654

CVE-2013-3654 is a confirmed vulnerability affecting LOCKON EC-CUBE versions 2.12.0 through 2.12.4. The issue is a directory traversal that allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php. This is described ...

EC-CUBE vulnerable to directory traversal

Overview EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability. Note that this vulnerability is different from JVN04161229. Gen Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

JVN#43886811: EC-CUBE vulnerable to directory traversal

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability. Note that this vulnerability is different from JVN04161229. Impact A remote attacker may obtain arbitrary image files on the server. Solution Apply the updat...

JVN#04161229: EC-CUBE vulnerable to directory traversal

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability. Note that this vulnerability is different from JVN43886811. Impact A remote attacker may obtain arbitrary image files on the server. Solution Apply the updat...

HTB22907: Directory Traversal in Collabtive

Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: Directory...

Project CMS 1.1 Beta Shell Upload

------------------------------------------------------------ MULTPLE REMOTE VULNERABILITIES --ProjectCMS v-1.1 Beta-- ------------------------------------------------------------ CMS INFORMATION: --WEB: http://projectcms.org/ --DOWNLOAD: http://projectcms.org/uploads/projectcms1.1BETA.zip --DEMO:...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== ProjectCMS 1.1b Multiple Remote Vulnerabilities =============================================== ---------------------------------------------------------------------------------------------- ...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

Directory traversal

Directory traversal vulnerability in the wtgallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors...

CVE-2008-6630

Directory traversal vulnerability in the wtgallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors...

CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

CVE-2007-4259

CVE-2007-4259 affects EZPhotoSales 1.9.3 and earlier. The vulnerability allows remote attackers to download arbitrary image files by either requesting a URL under OnlineViewing/galleries/ directly or by navigating the gallery UI with JavaScript disabled. The root cause is implied to be improper a...

CVE-2006-7103

Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3.2 Beta, allow remote attackers to 1 determine directory existence via a ".." in the album parameter in a showalbum action to a ezgallery.php, which produces different responses...

CVE-2006-1704

The CVE-2006-1704 entry concerns Sire 2.0 nws, where a flaw in upload.php allows remote attackers to upload arbitrary image files without authentication. The root cause is an unauthenticated file upload path via a direct request to upload.php, enabling an attacker to place image files on the serv...

CVE-2005-1583

The vulnerability CVE-2005-1583 affects 1Two News 1.0. It allows remote attackers to perform two actions via direct requests to admin endpoints: (1) delete images for new stories through admin/delete.php and (2) upload arbitrary images through admin/upload.php. The description does not state the ...

All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation

All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation source: https://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remo...