Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...

CVE-2007-5418

CVE-2007-5418 documents multiple PHP remote file inclusion flaws in CARE2X versions (notably 1.1 and 2G 2.2) that allow an attacker to execute arbitrary PHP code. The vulnerability is triggered by supplying a URL in the root_path parameter to a set of PHP scripts across include/ and main/ directo...

CVE-2007-5418: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...