CVE-2008-6834: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in fuzzylime cms 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the s parameter to code/commupdate.php in a count action or 2 the heads parameter to code/newsheads.php. NOTE: the blog.php vector...

CVE-2009-2112: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/pagebottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the FORUMsettingsdesignstyle parameter...

CVE-2008-6313: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...

CVE-2009-0592: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

CVE-2009-0442

CVE-2009-0442 affects PHPbbBook 1.3 and 1.3h. The vulnerability is a directory traversal in bbcode.php via the l parameter, allowing an attacker to include and execute arbitrary local files by supplying a ".." path component. Root cause is improper validation of the l parameter leading to path tr...

NPDS 08.06 - Multiple Input Validation Vulnerabilities

NPDS 08.06 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/33051/info NPDS is prone to multiple input-validation vulnerabilities: - Multiple local file-include vulnerabilities - An HTML-injection vulnerability - Multiple SQL-injection vulnerabilities - Multip...

file: URIs inherit chrome privileges

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has...

Directory traversal

Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-3190: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-2782

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-1856: Improper Input Validation

plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...

CVE-2008-1492: Improper Input Validation

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php and 2 install.php. NOTE: it was later reported that vector 1 is also present in 2.0...

CVE-2007-6453: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ulang parameter...

CVE-2007-3312: Undefined Security Weakness

Directory traversal vulnerability in admin/pluginmanager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and execute arbitrary local files a .. dot dot in the u parameter. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

CVE-2006-5735: Undefined Security Weakness

Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the language parameter, related to register.php storing a language value in the users table...

CVE-2006-5658

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...

AOL Instant Messenger URL href Attribute Traversal Arbitrary Local File Execution

Binary data 1245.prm...

firstclass71.txt

Product: FirstClass Desktop Client 7.1 Developer: SoftArc URL: http://www.softarc.com/ Description: Users clicking on a maliciously crafted link will result in local file execution. Details: FirstClass RTF formatted messages can include hyper-links to web URL's. When the messages recipient clicks...