CVE-2006-7024: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 funcprog parameter to a preload.php and b index.php; 2 headerprog parameter to c missing.php and d email.php, e files.php, f headlines.php, g...

CVE-2006-7017: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admintemplatepath parameter to admin/ scripts 1 appchangeemail.php, 2 appchangepwd.php, 3 appmodrewrite.php, 4 apppagecaching.php, 5 appsetup.php, 6 catadd.php,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 configpath parameter to a tagviewer.php, b tagprocess.php, and c CONFIG/errmsg.inc.php; and d...

CVE-2006-7003

PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871: Undefined Security Weakness

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0881: Undefined Security Weakness

PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the 1 configoidir and possibly 2 configopenidir parameters to open-admin/plugins/siteprotection/index.php. NOTE: vector 2 might be the same as...

CVE-2006-7006: Undefined Security Weakness

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...

eXtreme File Hosting remote file upload vulnerability

A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the GNPREALPATH parameter. NOTE: CVE and a third party dispute this issue, since GNPREALPATH is a constant, not a variable...

CVE-2007-0860: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 TEMPLATEDIR parameter to a showinvoices.php, b showmonth.php, c showevents.php, d retrieveinvoice.php, e modifyitem.php, and f lookupuserid.php; ...

CVE-2007-0861: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CCFG'PKGPATHMDLS' parameter. NOTE: this issue has been disputed by a reliable third party, who states that a fatal error occurs befo...

CVE-2007-0862: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the GNPREALPATH parameter. NOTE: CVE and a third party dispute this issue, since GNPREALPATH is a constant, not a variable...

CVE-2007-0850

scripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts that are referenced by the panelcronscript table in the SysCP database, which allows attackers with database write privileges to execute arbitrary code by constructing a PHP file and adding its filename...

Remote file inclusion

PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

CVE-2007-0839

Multiple PHP remote file inclusion vulnerabilities in index/indexalbum.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 PLIB and 2 PINDEX parameters...

CVE-2007-0839: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in index/indexalbum.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 PLIB and 2 PINDEX parameters...

CVE-2007-0848: Undefined Security Weakness

PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dateiennews parameter...