CVE-2009-3849: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long Template parameter to nnmRptConfig.exe, related to the strcat function; or 2 a long Oid parameter to snmp.exe...

CVE-2009-3848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function...

Directory traversal

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7240

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2009-3167: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

Directory traversal

Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. dot dot in the TEMPLATE parameter...

CVE-2009-2925: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. dot dot in the TEMPLATE parameter...

CVE-2009-2176

Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...

CVE-2009-2176

Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...

Directory traversal

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2009-0731

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2008-5272: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the template parameter to 1 starnet/editors/fckeditor/studenteditor.php; 2 starnet/modules/snnews/editcontent.php, reached through...

Directory traversal

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the...

Directory traversal

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

CVE-2008-4187

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

CVE-2008-4187: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

Pligg settemplate.php template Parameter Local File Inclusion

The remote host is running Pligg, an open source content management system. The installed version of Pligg fails to sanitize the 'template' cookie before using it in 'config.php' to include PHP code. An unauthenticated, remote attacker can exploit this issue to view arbitrary files or even execut...

Directory traversal

Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. dot dot in the template parameter...

CVE-2008-0464: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...