CVE-2008-6825: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. dot dot in the langChoice parameter...

Directory traversal

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

CVE-2009-1912: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. dot dot in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php...

Linux kernel multiple security vulnerabilities

CIFS client buffer overflow, Xen DoS, nfs4 files execution...

CVE-2009-1847: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

CVE-2009-1846: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the THEMEFOLDER parameter to 1 Corporate/homepage.php, 2 Fusion/homepage.php, 3 Joombo/homepage.php, 4 Streamline/homepage.php,...

CVE-2009-1774

The CVE-2009-1774 entry describes a Directory Traversal in Strawberry 1.1.1 affecting the plugin path plugins/ddb/foot.php, exploitable via a …/ file parameter to example/index.php to include and execute local files. The issue is triggered by crafting a path with .. (dot dot); details note that t...

CVE-2009-1765: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in pluck 4.6.2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langpref parameter to 1 data/modules/contactform/moduleinfo.php, 2 data/modules/blog/moduleinfo.php, and 3...

CVE-2009-1659: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...

CVE-2009-1502: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2009-1488: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

CVE-2009-1486: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the with parameter...

CVE-2009-1456: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

Directory traversal

Directory traversal vulnerability in cmsdetect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the include parameter...

CVE-2009-1405: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the setlng parameter...

CVE-2008-6734: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-6726

Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...

CVE-2008-6726: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...

CVE-2009-1319: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. dot dot in the lang parameter to index.php...