EUVD-2008-2975

Malware in sbrugna...

CVE-2008-2985: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in loadlanguage.php in CMReams CMS 1.3.1.1 Beta 2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the pagelanguage parameter...

cPanel本地文件包含漏洞

cPanel是一款基于PHP的WEB应用程序。 cPanel不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是多个脚本对用户提交的WEB参数缺少过滤，提交本地系统文件作为参数数据，可导致以WEB权限查看，泄露敏感信息。 cPanel cPanel 10.9 build 134 cPanel cPanel 10.9 build 125 cPanel cPanel 10.9 目前没有解决方案提供： http://www.cpanel.net/index.html...

Path traversal

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...