CVE-2009-2265

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009,...

CVE-2009-2265

Removed by vendor...

[oCERT-2009-007] FCKeditor input sanitization errors

2009-007 FCKeditor input sanitization errors Description: FCKeditor, a web based open source HTML text editor, suffers from a remote file upload vulnerability. The input of several connector modules is not properly verified before being used, this leads to exposure of the contents of arbitrary...

PT-2009-1125 · Fredck · Ckeditor

Name of the Vulnerable Software and Affected Versions: FCKeditor versions prior to 2.6.4.1 Description: The issue is related to multiple directory traversal vulnerabilities that allow remote attackers to create executable files in arbitrary directories. This is achieved through directory traversa...

CVE-2008-6342

Unspecified vulnerability in the TYPO3 Simple File Browser simplefilebrowser extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the TYPO3 Simple File Browser simplefilebrowser extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors...

CVE-2008-6342

The CVE-2008-6342 issue affects the TYPO3 Simple File Browser (simplefilebrowser) extension for TYPO3, versions up to 1.0.2. The connected documents describe an unspecified vulnerability that could allow remote attackers to obtain sensitive information via unknown attack vectors. No root-cause an...

CVE-2008-6342

Unspecified vulnerability in the TYPO3 Simple File Browser simplefilebrowser extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors...

Directory traversal

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...

CVE-2008-0466

Summary: CVE-2008-0466 affects Web Wiz components (RTE_file_browser.asp) used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, where an unauthenticated remote attacker can list directories and read files. The vulnerability enables directory listings and file reads a...

Web Wiz NewsPad 1.02 (sub) Remote Directory Traversal Vulnerability

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz NewsPadTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal Vulnerable Version: 1.02 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz NewsPad is a...

Debian: Security Advisory (DSA-698-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

Immunity Canvas: AJAXFB_INCLUDE

Name| ajaxfbinclude ---|--- CVE| CVE-2007-4921 Exploit Pack| CANVAS Description| Ajax File Browser 3 Beta Remote File Inclusion Notes| CVE Name: CVE-2007-4921 VENDOR: Ajax File Browser Notes: None Repeatability: Infinite References: http://securityreason.com/exploitalert/2767 CVE Url:...

CVE-2007-4921

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

CVE-2007-4921

PHP remote file inclusion vulnerability in includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter...

CVE-2007-4921

Concretely, CVE-2007-4921 affects Ajax File Browser 3 Beta and is a PHP remote file inclusion in _includes/settings.inc.php via the approot parameter, allowing remote code execution. Connected advisories note a lack of input sanitization; an Immunity CANVAS entry references an AJAXFB_INCLUDE expl...

Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...

Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...

Ajax File Browser 3b - 'settings.inc.php?approot' Remote File Inclusion

Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL: http://surfnet.dl.sourceforge.net/sourceforge/ajaxfb/afb-3-beta-2007-08-28.zip Vulnerabilit...