CVE-2008-7163: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...

CVE-2009-2963: Undefined Security Weakness

Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the download and execution of arbitrary files via attack vectors related to a "malformed update url and a malformed update website."...

CVE-2008-7054

Technical details about CVE-2008-7054 are not publicly provided in the connected documents. The entries reiterate the vulnerability description without product/version specifics. Monitor for updates from official advisories to obtain concrete impact, affected components, and fixes.

CVE-2008-7054: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

CVE-2009-2784: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in dit.cms 1.3, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter to index.php in 1 install/, 2 menus/leftrightslideopen/, 3 menus/sidepullout/, 4...

CVE-2008-6926: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only...

CVE-2008-6901: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 settings.php, 2 deleteuser.php, 3...

The latest remote file code execution exploit method-vulnerability warning-the black bar safety net

about them on the Internet search Uebimiau Webmail Address followed by /uebimiau/admin/editor. php? load=config is the person holding the encryption /uebimiau/index. php? cmd=id All is Foreign,,, master can play。。。。。。。 Vulnerability published Time 2 0 0 9 to 6. 1 2...

CVE-2009-2552: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter...

CVE-2009-2444: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter to setup/index.php...

CVE-2009-2386

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2263: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathnam...

CVE-2009-2223: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cwd parameter. NOTE: remote file inclusion attacks may be possible...

Directory traversal

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

CVE-2008-6834: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in fuzzylime cms 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the s parameter to code/commupdate.php in a count action or 2 the heads parameter to code/newsheads.php. NOTE: the blog.php vector...

CVE-2008-6833: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

CVE-2009-2124: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

CVE-2009-2112: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/pagebottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the FORUMsettingsdesignstyle parameter...

CVE-2009-1960: Improper Control of Generation of Code

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...