CVE-2007-2633: Undefined Security Weakness

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

Directory traversal

Directory traversal vulnerability in includes/footer.php in News Manager Deluxe NMDeluxe 1.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

Directory traversal

Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

CVE-2007-1126: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

CVE-2006-5535: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WebHostManager WHM 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the 1 theme parameter to scripts/dosetmytheme and the 2 template parameter to scripts2/editzonetemplate...

CVE-2006-4428

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include...

CVE-2006-4428: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include...

PT-2006-5229 · Jupiter · Jupiter Cms

Name of the Vulnerable Software and Affected Versions: Jupiter CMS version 1.1.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the template parameter in the index.php file. However, it's noted that the $template variable is defined as a static value...

CVE-2006-3611

Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALStemplate parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php...

CVE-2006-3195

Cross-site scripting XSS vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter...

CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3194

Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the 1 gallery and 2 template parameter...

CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3196: Undefined Security Weakness

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3195: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter...

CVE-2006-3050

Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the template parameter...

CVE-2006-3050

Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the template parameter...

CVE-2006-3050: Undefined Security Weakness

Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the template parameter...

CVE-2006-2280: Undefined Security Weakness

Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. dot dot in the template parameter...

Loudblog < 0.42 template Parameter Traversal

The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog installed on the remote host fails to sanitize input to the 'template' parameter of the 'index.php' script before returning the contents of the file in a dynamic web pag...