CVE-2007-1394

The CVE-2007-1394 entry concerns Flat Chat 2.0. It describes a direct static code injection vulnerability in startsession.php, where the Chat Name field is inserted into online.txt and subsequently included by users.php. The root cause is unsafely incorporating user-provided input into executable...

Premod SubDog 2 - includesthemen_portal_mitte.php?phpbb_root_path Remote File Inclusion

Premod SubDog 2 - includesthemenportalmitte.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing...

Premod SubDog 2 - includesfunctions_kb.php?phpbb_root_path Remote File Inclusion

Premod SubDog 2 - includesfunctionskb.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing maliciou...

CVE-2007-1393: Undefined Security Weakness

PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

Premod SubDog 2 - includeslogger_engine.php?phpbb_root_path Remote File Inclusion

Premod SubDog 2 - includesloggerengine.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicio...

Premod SubDog 2 - '/includes/functions_kb.php?phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

Premod SubDog 2 - '/includes/logger_engine.php?phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

Premod SubDog 2 - '/includes/themen_portal_mitte.php?phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

SoftNews 4.1/5.5 - '/engine/init.php?root_dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/22913/info DataLife Engine is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

CVE-2007-1340: Undefined Security Weakness

PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sqllog parameter...

CVE-2006-7156

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-7148

PHP remote file inclusion vulnerability in includes/bbusagestats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter. NOTE: this might be the same issues as CVE-2006-4893...

CVE-2006-7136

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7135: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2007-1299: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

CVE-2006-7146: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter, a different vector than CVE-2006-5280. NOTE: CVE disputes this issue, since bug.php is...

CVE-2006-7156: Undefined Security Weakness

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2007-1288: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

CVE-2006-7136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7120

PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. NOTE: this issue might be in phpHtmlLib. NOTE: CVE disputes this issue for proper...