Directory traversal

Multiple directory traversal vulnerabilities in osCommerce 3.0.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 set or 2 module parameter to a OM/Core/Site/Admin/Application/templatesmodules/pages/info.php, b...

CVE-2010-3910: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the returnapplicationlanguage function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the langcrm parameter to phprint.php or 2 the currentlanguage...

CVE-2008-3365: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

CVE-2006-7117

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...