EUVD-2010-1941

Malware in sbrugna...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the LibDir parameter to 1 lib/page/pageDescriptionObject.php, and 2 layoutHeaderFuncs.php, 3 layoutManager.php, and 4 layoutParser.php in lib/layout/...

CVE-2006-5426: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter...

CVE-2006-4115: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the CFGlibdir parameter...