EUVD-2008-0804

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...

CVE-2008-0797

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...

CVE-2008-0797

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...

CVE-2008-0797

CVE-2008-0797 affects iTheora 1.0 rc1. Vulnerable component: lib/download.php; the url parameter allows directory traversal, enabling remote attackers to read arbitrary files. Root cause: insufficient input sanitization of the url parameter. Impact: read access to arbitrary filesystem files can b...

CVE-2008-0797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...