3 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIRPREFIX parameter...
CVE-2007-4744
Vulnerability summary (CVE-2007-4744) : A PHP remote file inclusion flaw in AnyInventory 1.9.1 and 2.0 enables an attacker to execute arbitrary PHP code when register_globals is on. The issue is triggered via a URL in the DIR_PREFIX parameter within environment.php, allowing remote code execution...
CVE-2007-4744: Improper Input Validation
PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIRPREFIX parameter...