CVE-2026-75592: Improper Limitation of a Pathname to a Restricted Directory

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

CVE-2021-36547

A remote code execution RCE vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file...

CVE-2021-36547

Summary: Mara CMS v7.5 contains a remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew. The root cause is alleged improper input filtering in the file upload logic, enabling an attacker to upload a crafted PHP file that can execute arbitrary commands. This iss...

CVE-2021-36547: Unrestricted Upload of File with Dangerous Type

A remote code execution RCE vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file...

PT-2021-21285

Name of the Vulnerable Software and Affected Versions Mara version 7.5 Description A remote code execution issue in the /codebase/dir.php?type=filenew component allows attackers to execute arbitrary commands via a crafted PHP file. Recommendations For Mara version 7.5, consider disabling the...

CVE-2020-25042

CVE-2020-25042 concerns Mara CMS 7.5 where an authenticated admin/manager can upload PHP via codebase/handler.php after invoking codebase/dir.php?type=filenew, enabling arbitrary code execution. The vulnerability is triggered by an authenticated session and a crafted request; public exploit detai...

CVE-2020-25042: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated admin/manager session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php...

PT-2013-1976

Name of the Vulnerable Software and Affected Versions Organizer plugin version 1.2.1 for WordPress Description The issue allows remote attackers to obtain the installation path via unspecified vectors to various PHP files, including "plugin hook.php", "page/index.php", "page/dir.php",...

CVE-2008-5883: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

mini-pub 0.3 - Local Directory Traversal File Disclosure

mini-pub 0.3 - Local Directory Traversal File Disclosure | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | mini-pub.php = v0.3 Local Directory Traversal / File Disclosure Vulnerabilities Script : http://mini-pub.sourceforge.net/...

Cross site scripting

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

CVE-2007-6641

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

CVE-2007-6641

CVE-2007-6641 is an XSS vulnerability in milliscripts Redirection, affecting dir.php where an attacker can inject arbitrary script/HTML by supplying the cat parameter in a browse action. The NVD entry lists a medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base score 4.3). No exploitation d...

CVE-2007-6641: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action...

milliscripts (dir.php) Cross-Site Scripting Vulnerability

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

milliscripts-xss.txt

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

MilliScripts - 'dir.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27078/info MilliScripts is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

esyndicatles-sql.txt

-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-200...

eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability ====================================================================...

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-20...