CVE-2008-2091: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-2081: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-1908: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...

torrent-pwnage.txt

The following are proof of concept exploits against three bittorrent clients. uTorrent' WebUI, Azurues's "HTML WebUI", and TorrentFlux. More information: http://www.rooksecurity.com/blog/?p=10 TorrentFlux v2.3Latest http://sourceforge.net/projects/torrentflux/ If you force TorrentFlux to download...

CVE-2008-1856: Improper Input Validation

plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...

CVE-2008-1653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-1642: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1553: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the to parameter...

CVE-2008-1555: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...

Directory traversal

Directory traversal vulnerability in pbinc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC...

CVE-2008-1537: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pbinc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC...

CVE-2008-1512: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1492: Improper Input Validation

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php and 2 install.php. NOTE: it was later reported that vector 1 is also present in 2.0...

CVE-2008-1409: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to 1 index.php, 2 editpassword.php, and 3 avatar.php in usercp/; 4 custompage.php; 5...

CVE-2008-1231: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. dot dot in the editor parameter...

Barryvan Compo Manager 0.3 - 'main.php' Remote File Include Vulnerability

Barryvan Compo Manager 0.3 'main.php' Remote File Include Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28035/info Barryvan Compo Manager is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attack...

CVE-2008-0840: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0812

CVE-2008-0812 affects BanPro DMS 1.0. The vulnerability is a directory traversal in DMS/index.php where the action parameter can be manipulated with “..” to include and execute arbitrary files. Affected: BanPro DMS 1.0 (DMS/index.php). Impact per provided data is arbitrary file inclusion/executio...

CVE-2008-0812: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...

CVE-2008-0745: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...