Directory traversal

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the actionfile parameter...

CVE-2008-3405

CVE-2008-3405 describes a directory traversal vulnerability in the nzFotolog web application ( Ricardo Amaral nzFotolog 0.4.1 ). The flaw is in index.php where attackers can craft the action_file parameter to traverse directories and include/execute arbitrary local files on the server. Impact is ...

nzfotolog-lfi.txt

nzFotolog v0.4.1 Lfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.nazgulled.net DORK : "Powered by nzFotolog v0.4.1 © 2005-2006 Ricardo Amaral" Lfi...

CVE-2008-3405: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the actionfile parameter...