EUVD-2008-1053

Malware in sbrugna...

EUVD-2008-7198

Malware in sbrugna...

EUVD-2008-1054

Malware in sbrugna...

CVE-2008-7240

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

Directory traversal

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7240

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7240

CVE-2008-7240 describes a directory traversal vulnerability in Linux Web Shop (LWS) PHP User Base 1.3beta. The flaw is in include/unverified.inc.php and allows remote attackers to include and execute arbitrary local files by manipulating the template parameter. Public references (X-Force, Securit...

Directory traversal

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

CVE-2008-1043

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

CVE-2008-1042

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

CVE-2008-1043

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

CVE-2008-1043

Affected software: Linux Web Shop (LWS) PHP User Base 1.3 BETA. Vulnerability type: PHP remote file inclusion in templates/default/header.inc.php. Root cause / vector: remote attackers can supply a URL in the menu parameter, leading to arbitrary PHP code execution. Impact (as stated): arbitrary c...

CVE-2008-1042

CVE-2008-1042 describes a directory traversal in Linux Web Shop (LWS) PHP Download Manager 1.0 and 1.1, where include/body.inc.php accepts a .. in the content parameter to include and execute arbitrary local files. This vulnerability can impact confidentiality, integrity, and availability (CVSSv2...