EUVD-2009-3407

Malware in sbrugna...

CVE-2009-3425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/inc.thcmsadmindirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMSroot parameter...

MAXcms 3.11.20b Remote File Inclusion

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...