CVE-2007-0501: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators adv-random-gen allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter...

CVE-2005-4824: Undefined Security Weakness

PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCALPATH parameter, a different vulnerability than CVE-2005-1965...

Unrestricted file upload

Unrestricted file upload vulnerability in index.php in phpBP RC3 2.204 and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an imageform parameter specifying a multiple-extension filename...

Remote file inclusion

PHP remote file inclusion vulnerability in libraries/grabglobals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-0361: Undefined Security Weakness

PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter...

CVE-2007-0359: Undefined Security Weakness

PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setupfolder parameter...

CVE-2007-0395: Undefined Security Weakness

PHP remote file inclusion vulnerability in libraries/grabglobals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CVE-2007-0314: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...

CVE-2007-0301: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/adminmenu.php in FdWeB Espace Membre 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-0298

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

CVE-2007-0298: Undefined Security Weakness

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. NOTE: a reliable third party disputes this vulnerability because thispath is defined before use...

CVE-2007-0260: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. NOTE: a reliable third party disputes this vulnerability because thispath is defined before use...

CVE-2007-0230: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...

CVE-2007-0190

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

CVE-2007-0182: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter to 1 adminpassword.php, 2 addwelcometext.php, 3 adminemail.php, 4 addtemplates.php, 5 adminpaypalemail.php, 6...

CVE-2007-0172: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

CVE-2007-0171: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AMLopensite parameter...

CVE-2007-0181: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...