Shockshadow

Pesquisador deElectronic Security Team (Yee7.Com)
#9051de 60,594
35.4CVSS total
Vulnerabilidades · 5
Média
3
Alta
2
PT-2008-6659
2008-12-16
5.0
CVE-2008-5598
Php
Phpmygallery
The issue allows remote attackers to list arbitrary directories via a .. (dot dot) in the `group` parameter in the "index.php" file.
PT-2007-7387
2007-12-28
9.3
CVE-2007-6555
Open Source Matters
Joomla!
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `GLOBALS[mosConfig absolute path]` parameter in the modules/mod pxt latest.php file.
PT-2007-6198
2007-09-26
6.8
CVE-2007-5102
Wordsmith
Wordsmith
The issue allows remote attackers to execute arbitrary PHP code via a URL in the ` path` parameter when `register globals` is enabled.
PT-2007-6199
2007-09-26
6.8
CVE-2007-5103
Wordsmith
Wordsmith
The issue allows remote attackers to include and execute arbitrary local files due to a directory traversal vulnerability in the config.inc.php file when register globals is enabled. This is achieved by using a .. (dot dot) in the ` path` parameter.
PT-2007-6168
2007-09-24
7.5
CVE-2007-5065
Joomla
Joomla! Flash Slide Show
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mosConfig live site` parameter in the admin.slideshow1.php file.