CVE-2012-5293: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSrootpath parameter to usr/extensions/gettree.inc.php or 2 rootpath parameter to usr/extensions/getinfochannel.inc.php...

CVE-2006-4984: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4062: Undefined Security Weakness

PHP remote file inclusion vulnerability in usr/extensions/gettree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter...