CVE-2007-5308

The CVE-2007-5308 entry concerns SQL injection in galerie.php of PHP Homepage M (phpHPm) 1.0 when magic_quotes_gpc is disabled. Remote attackers can modify the id parameter in a show action to execute arbitrary SQL commands (impacting confidentiality, integrity, and availability). The NVD entry l...

CVE-2006-5308

Open Conference Systems (OCS) before 1.1.6 is affected by multiple PHP remote file inclusion vulnerabilities. The issue is triggered via a URL in the fullpath parameter used by include/theme.inc.php or include/footer.inc.php, potentially allowing an unauthenticated attacker to view arbitrary file...