14 matches found
CVE-2014-100029
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...
CVE-2014-100029
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...
CVE-2014-100029: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...
PT-2015-3636
Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files by utilizing a .. dot dot in specific parameters. The...
If-CMS 2.07 Local File Inclusion
$Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding:...
CVE-2009-2151
Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...
Directory traversal
Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...
CVE-2009-2151: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. dot dot in the newlang parameter...
Directory traversal
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...
CVE-2008-0458: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...
SLAED CMS 2.5 Lite (newlang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== SLAED CMS 2.5 Lite newlang Local File Inclusion Vulnerability =============================================================== SLAED CMS 2.5 Lite Local file inclusion Script ur...
SLAED CMS 2.5 Lite - newlang Local File Inclusion
SLAED CMS 2.5 Lite - newlang Local File Inclusion SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang,...
SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion
SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang, $language, $usercookiet; 783: if...
CVE-2006-0644: Undefined Security Weakness
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS aka CPG Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in 1 the newlang parameter and 2 the installlang...