CVE-2010-1594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2007-2941: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map vBGSiteMap 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to 1 vbgsitemap/vbgsitemap-config.php or 2 vbgsitemap/vbgsitemap-vbseo.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to 1 language.php and 2 phpadmin/survey.php...

CVE-2007-1640

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to 1 language.php and 2 phpadmin/survey.php...

CVE-2007-1640: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to 1 language.php and 2 phpadmin/survey.php...

CVE-2006-2002: Undefined Security Weakness

PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirbase parameter...

CVE-2004-1934: Undefined Security Weakness

PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter...