Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2012-10-11 CVE-2012-5386 Path Traversal vulnerability in Nicolas Tormo PHPpaleo 4.8B180
Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a ..
6.8
2012-10-09 CVE-2012-5344 Path Traversal vulnerability in Kepler LAM Iptools 0.1.4
Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a ..
network
low complexity
kepler-lam CWE-22
5.0
2012-10-09 CVE-2011-5210 Path Traversal vulnerability in Limny 3.0.0
Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the theme parameter.
network
limny CWE-22
6.8
2012-10-08 CVE-2012-5335 Path Traversal vulnerability in Saurabh Gupta Tiny Server 1.1.5
Directory traversal vulnerability in Tiny Server 1.1.5 allows remote authenticated users to read arbitrary files via a ..
network
low complexity
saurabh-gupta CWE-22
4.0
2012-10-08 CVE-2012-5331 Path Traversal vulnerability in Nasir Khan Asaancart 0.9
Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a ..
network
nasir-khan CWE-22
6.8
2012-10-08 CVE-2012-1671 Path Traversal vulnerability in Nicolas Tormo PHPpaleo 4.8B155
Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a ..
6.8
2012-10-08 CVE-2011-5208 Path Traversal vulnerability in Backwpup
Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a ..
network
low complexity
backwpup wordpress CWE-22
5.0
2012-10-08 CVE-2011-4640 Path Traversal vulnerability in Spamtitan Webtitan 3.50
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a ..
network
low complexity
spamtitan CWE-22
4.0
2012-10-06 CVE-2012-0987 Path Traversal vulnerability in Impresscms
Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a ..
network
impresscms CWE-22
6.0
2012-10-05 CVE-2012-5051 Path Traversal vulnerability in VMWare Capacityiq 1.5.0/1.5.1/1.5.2
Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
vmware CWE-22
5.0