Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2008-3194 (Pluck)

BugsAlert Home > CVE-2008-3194 (Pluck)
 
 

Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) langpref, (2) file, (3) blogpost, or (4) cat parameter.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3194

Learn more about CVE-2008-3194 (Pluck)
 
Tags: cve-2008-3194 pluck

Related Items

      Mandriva: Updated samba packages fix vulnerabilities

      FrSIRT - Fedora Security Update Fixes Net-SNMP Denial of Service Vulnerability

      Gentoo update for ngircd

      FrSIRT - PHPizabi Arbitrary File Upload Remote Code Execution Vulnerability

      Fedora 9 Update: xine-lib-1.1.15-1.fc9

      BKDR_HUPIGON.MLC

      Fastpublish CMS Multiple Vulnerabilities

 

Pixel