CVE-2003-1550: Exposure of Sensitive Information to an Unauthorized Actor

XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message...

RunCMS include/common.php xoopsOption Parameter Local File Inclusion

Binary data 4295.prm...

CVE-2007-6079: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...