CVE-2007-2008

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2006-4584

Tr Forum 2.0 is affected by CVE-2006-4584, where remote attackers can bypass authentication and add an administrative account via login and password parameters to admin/insert_admin.php. The vulnerability allows partial confidentiality, integrity, and availability impact (CVSS v2 base score 7.5, ...

PT-2004-2741 · Php Nuke · Php-Nuke

Name of the Vulnerable Software and Affected Versions: Php-Nuke versions 6.x through 7.1.0 Description: A cross-site request forgery issue allows remote attackers to gain administrative privileges. This can be achieved via an img tag with a URL to "admin.php". Recommendations: For Php-Nuke versio...