106 matches found
CVE-2007-2331
CVE-2007-2331 affects Shop-Script 2.0: PHP remote file inclusion via the lang_list parameter in cart.php, allowing an attacker to cause arbitrary PHP code execution by providing a URL. The root cause is improper handling of user-supplied input for remote file inclusion. Impact is partial confiden...
CVE-2006-2331
Summary: CVE-2006-2331 concerns PHP-Fusion 6.00.306 with multiple directory traversal weaknesses that let remote attackers cause local-file inclusion and arbitrary code execution via two input vectors. Specifically, an unauthenticated attacker can inject a ".." sequence in settings[locale] within...
CVE-2004-2331
Summary of CVE-2004-2331 (ColdFusion MX 6.1 / 6.1 J2EE): Local users could bypass sandbox security and access sensitive information by using Java reflection to reach trusted Java objects without invoking CreateObject or the cfobject tag. The issue affects ColdFusion MX 6.1 and ColdFusion MX 6.1 J...
CVE-2005-2331
PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type parameter...
CVE-2005-2331
CVE-2005-2331 involves a PHP remote file inclusion vulnerability in MooseGallery’s display.php, where the type parameter allows an attacker to cause arbitrary PHP code execution. Affected software is MooseGallery (PHP-based) with vulnerable display.php handling the type parameter. The underlying ...