CVE-2008-5966

CVE-2008-5966 affects Globsy 1.0 and earlier, where globsy_edit.php allows remote attackers to create or overwrite arbitrary files via the file parameter (filename) and data parameter (file contents). Root cause is improper handling of user-supplied filename and content, enabling arbitrary file w...

CVE-2008-5966: Improper Input Validation

globsyedit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file parameter and file contents in the data parameter...

CVE-2008-0905: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in globsyedit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Globsy 1.0 - 'file' Remote File Disclosure

Globsy 1.0 file Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/globsy/globsy1.0.tar.gz /globsyedit.php?file=globsyconfig.php /globsyedit.php?file=../../../../../../../etc/passwd milw0rm.com 2008-02-20...