CVE-2007-6038

The CVE-2007-6038 issue affects Joomla! JUser component (com_juser) v1.0.14. A PHP remote file inclusion occurs in xajax_functions.php via mosConfig_absolute_path, allowing an attacker to execute arbitrary PHP code by supplying a crafted URL. Connected documents corroborate the RFI nature and cit...

CVE-2006-6038

SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6038

CVE-2006-6038 affects Powie’s PHP Forum (pForum) prior to and including version 1.29a, where SQL injection is triggered in editpoll.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL statements; impact is partial confidentiality/integrity/availability per...