CVE-2009-0515: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-6083

Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-6074: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...

CVE-2009-0457: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the 1 ContactPlus and 2 Reviews modules, and 3 the modulename parameter to...

CVE-2009-0442

CVE-2009-0442 affects PHPbbBook 1.3 and 1.3h. The vulnerability is a directory traversal in bbcode.php via the l parameter, allowing an attacker to include and execute arbitrary local files by supplying a ".." path component. Root cause is improper validation of the l parameter leading to path tr...

CVE-2009-0423

CVE-2009-0423 describes a directory traversal vulnerability in the PHPPA (Php Photo Album) 0.8 BETA release. An attacker can exploit improper handling in index.php to cause local file inclusion via a .. (dot dot) in the preview parameter, enabling arbitrary local file access or execution. Impact ...

CVE-2009-0423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2008-6025: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the obj parameter...

CVE-2009-0371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the type parameter...

CVE-2009-0330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2008-5990: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sitecode parameter to connect/index.php...

CVE-2008-5968: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cookielanguage parameter in a phpicalendar cookie, a different vector than CVE-2006-1292...

CVE-2008-5948: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlanguage parameter...

Update Protection against Symantec AppStream Client LaunchObj ActiveX Control Program Execution

A remote code execution vulnerability was reported in Symantec AppStream Client. The AppStream Client is part of a Software Virtualization Solution SVS which allows streaming of virtual applications to users in an enterprise environment using the AppStream Server. The vulnerability is due to...

CVE-2008-5962: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

Excel Viewer OCX 3.2 File Execution

---------------------------------------------------------- Excel Viewer OCX 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- Excel Viewer OCX 3.2 Remo...

Excel Viewer OCX 3.2 Remote File Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== Excel Viewer OCX 3.2 Remote File Execution Exploit ================================================== ---------------------------------------------------------- Excel Viewer OCX 3.2 Remote...

Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit

No description provided by source. =======================================================================================br Author: Houssamix br =======================================================================================br Office Viewer ActiveX Control v 3.0.1 Remote File execution...

Word Viewer OCX 3.2 Remote File Execution exploit

No description provided by source. HTML ---------------------------------------------------------- br Word viewer OCX V 3.2 Remote File execution exploitbr ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

PowerPoint Viewer OCX 3.1 Remote File Execution Exploit

No description provided by source. PowerPoint Viewer OCX v3.1 Remote File Execution Exploit Founded By : Cyber-Zone E-mail : [email protected] Home : WwW.Exploiter5.CoM GreetZ : Houssamix , Hussin X , JiKo , StaCk , str0ke , The5p3ctrum HTML BODY object id=Cyb...