CVE-2009-2557

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

CVE-2009-2557: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

Directory traversal

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2007-0679: Undefined Security Weakness

PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fichier parameter...

CVE-2005-2685: Undefined Security Weakness

SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability ste...