Directory traversal

Multiple directory traversal vulnerabilities in WHMCompleteSolution WHMCS 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to 1 submitticket.php and 2 downloads.php, and 3 the report parameter to admin/reports.php...

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

CVE-2009-5071

CVE-2009-5071 (Palm Pre WebOS before 1.2.1) technical details are not publicly available in the provided documents; monitor for updates.

CVE-2009-5071

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...

ActiveKB RFI Vulnerability

Exploit for unknown platform in category web applications ========================== ActiveKB RFI Vulnerability ========================== ====================== Dz-Ghost Team =================== Exploit : 1- http://server/sm-ak051/includes/classes/class.template.php?panelPHPFile=EV!L...

Design/Logic Flaw

Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file...

CVE-2008-7205

Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file...

CVE-2008-7205

CVE-2008-7205 affects VirtueMart 1.0.13a and earlier. A vulnerability in the product view functionality allows remote attackers to read arbitrary files via vectors related to a template file. The impact is partial confidentiality (read access). No remediation details are provided in the connected...

Another You tube clone script vulnerability

ChX Security | Advisory 2 | ============= - "Generic YouTube Clone Script - XSRF: Arbitrary Code Injection" - Data | ====== Author: Pepepistola Pepepistolaatchxsecuritydotorg Program: Generic YouTube Clone Script Severity: Moderately Critical Type of Advisory: Mid Disclosure Affected/Tested...

PT-2007-4630 · Myevent · Myevent

Name of the Vulnerable Software and Affected Versions: MyEvent version 1.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myevent path parameter in the includes/template.php file. A reliable third party disputes this issue, stating that the entire fi...

Wordpress物理路径暴露漏洞

wordpress的模板文件，缺少访问验证，直接访问模板里的文件，就会泄露物理路径。这个不是PHP漏洞，是WordPress的漏洞。 比如访问:http://hostname/wordpress/wp-content/themes/default 就会显示: Fatal error: Unknown function: getheader in /home/publichtml/yz/wp-content/themes/default/index.php on line 1 wordpress 2.1.2 以及之前的版本 在模板里的文件头部加上以下代码，可以防止泄露路径。 ?php...

Directory traversal

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file...

silvernews203.txt

Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...

cuteNewsExec.txt

There is a vulnerability in the latest and to the best of my knowledge, all prior versions of CuteNews from CutePHP.com. CuteNews does not properly sanitize user input when an administrative account edits the template files. CuteNews takes HTML code from a web form and outputs it to a template fi...

CVE-2005-1876

Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template .tpl file...

CVE-2005-1876

Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template .tpl file...

CVE-2005-1876

The CVE-2005-1876 entry describes a direct code injection vulnerability in CuteNews 1.3.6 and earlier . The issue allows remote attackers with administrative privileges to execute arbitrary PHP code by inputs injected into a template file (.tpl), effectively compromising the server’s PHP executio...

[Full-Disclosure] Novell GroupWise WebAccess error modules loading

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear ladies and gentlemen We have found a potential security vulnerability in the Novell GroupWise WebAccess error module handling. First of all it is possible to circumvent the login procedure. If a user connects to...

PHPSysInfo 2.0/2.1 - 'index.php' File Disclosure

source: https://www.securityfocus.com/bid/7275/info PHPSysInfo has been reported to be vulnerable to a file disclosure issue. Local users may be capable of influencing the include path for several PHPSysinfo template files. If the malicious template file is symlinked to a web server readable file...