CVE-2007-1643

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...