EUVD-2006-0140

Malware in sbrugna...

CVE-2006-0132

CVE-2006-0132 describes a directory traversal in SysCP WebFTP 1.2.6 (and possibly earlier) where an attacker can manipulate the webftp_language parameter with a “..” sequence and a trailing null to cause local PHP scripts to be included/executed, and potentially read other files. The vulnerabilit...