CVE-2007-5567: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/fckeditor/uploadconfig.php in Galmeta Post 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the DDS parameter...

CVE-2007-5566: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in the bloglocalpath parameter to 1 includes/functions.php or 2 includes/email.php. NOTE: this issue is disputed by CVE because the identified code is in function...

CVE-2002-2299: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2007-5574: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2002-2287: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in quickreply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter...

CVE-2002-2297: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2007-5492: Improper Control of Generation of Code

Static code injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter...

CVE-2007-5451: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab aka comcolor 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5440: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter to 1 index.php or 2 login.php. NOTE: this issue is disputed by CVE, since DOCUMENTROOT cannot be modified by an attacker...

CVE-2007-5412: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass commp3allopass 1.0 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter to 1 allopass.php and 2 allopass-error.php...

CVE-2007-5409: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/nuseoadmind.php in NuSEO PHP Enterprise 1.6 NuSEO.PHP, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the nuseodir parameter...

CVE-2007-5387: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ccomponents parameter...

CVE-2007-5410: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5389: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in preview.php in the swMenuFree comswmenufree 4.6 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: a reliable third party disputes this issue because preview.php tests a...

CVE-2007-5362: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite commosmedia 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 credits.html.php, 2 info.html.php, 3...

CVE-2007-5313: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-5305: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 contenus parameter to a contenus.php; the 2 tpelseifportalrepertoire parameter to b votes.php, c espaceperso.php, d enregistrement.php, e...

CVE-2007-5309: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery comwmtgallery 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5307: Improper Control of Generation of Code

ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by uploading a .php file via externe/swfupload/upload.php. NOTE: it coul...

CVE-2007-5298: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP code via a URL in the cfgdocumenturi parameter to 1 administration/securite.php and 2 administration/gestionconfigurations/saveconfig.php...