105 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki formerly JD-Wiki component comjd-wiki 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 dwpage.php or 2 wantedpages.php, different...
CVE-2006-4074
PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component comjd-wiki 1.0.2 and earlier for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-4074
CVE-2006-4074 affects the JD-Wiki (com_jd-wiki) Joomla! component (1.0.2 and earlier). The vulnerability is a PHP remote file inclusion in lib/tpl/default/main.php that, when register_globals is enabled, allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP on th...
CVE-2005-4074
The CVE-2005-4074 entry describes a directory traversal vulnerability in CF_Nuke 4.6 and earlier. When Sandbox Security is disabled, remote attackers can cause local .cfm files to be included via a ".." in the (1) sector or (2) page parameters. The connected documents provide this exact vulnerabi...