Directory traversal

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2001-1054

The CVE-2001-1054 vulnerability affects PHPAdsNew, allowing a remote attacker to include arbitrary PHP files hosted on third‑party servers via an HTTP request that sets the includedir variable. This constitutes a Remote File Inclusion flaw in the PHPAdsNew helperfunction.php context, enabling arb...