92 matches found
CVE-2006-5437
Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. dot dot in the phpAdsconfiglanguage parameter. NOTE: this issue could not be reproduced by a third party...
CVE-2006-5437
Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. dot dot in the phpAdsconfiglanguage parameter. NOTE: this issue could not be reproduced by a third party...
CVE-2006-5437
Affected software: phpAdsNew 2.0.8. Issue: directory traversal in upgrade.php due to unsanitized input in phpAds_config[language] parameter, enabling remote attackers to read arbitrary files by supplying a .. payload. Root cause: insufficient input validation in upgrade.php. Impact: potential exp...
PT-2006-6156 · Phpadsnew · Phpadsnew
Name of the Vulnerable Software and Affected Versions: phpAdsNew version 2.0.8 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the phpAds configlanguage parameter in the "upgrade.php" file...
CVE-2006-5437: Undefined Security Weakness
Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. dot dot in the phpAdsconfiglanguage parameter. NOTE: this issue could not be reproduced by a third party...
phpAdsNew include bug!
Autors: - Micha wacky Baszczak - Nobody http://iHACK.pl File: modules/phpads/admin/upgrade.php Code: // Load language strings if fileexists"../language/".$phpAdsconfig'language'."/default.lang.ph p" include"../language/".$phpAdsconfig'language'."/default.lang.php"; else $phpAdsconfig'language' =...
CVE-2006-2978: Undefined Security Weakness
Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to 1 big.php and 2 upgrade.php...
CVE-2005-4174
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...
CVE-2005-4174
CVE-2005-4174 affects eFiction versions 1.0, 1.1, and 2.0. The issue allows remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether the flaw originates from eFiction itself or from improper system administration (e.g., leftover u...
CVE-2005-4174: Undefined Security Weakness
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...
CVE-2004-0241
CVE-2004-0241 affects X-Cart 3.4.3 (Qualiteam X-Cart). The vulnerability allows remote attackers to execute arbitrary commands by supplying output in the perl_binary parameter in either upgrade.php or general.php. The underlying cause is improper handling of the perl_binary argument, leading to a...