CVE-2006-6962: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component comrsgallery2 1.11.2 for Joomla! allows attackers to execute arbitrary PHP code via the mosConfigabsolutepath parameter. NOTE: this issue may overlap CVE-2006-5047...

CVE-2007-0508

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...

CVE-2007-0508: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...

CVE-2007-0531: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter...

CVE-2007-0511: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpXMLDOM phpXD 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 dom.php, 2 dtd.php, or 3 parser.php in include/...

PT-2007-1990 · Unknown · Advanced Guestbook

Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.4.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter to API endpoints such as "index.php", "addentry.php", or "picture.php". Recommendations: For...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Openads aka phpAdsNew 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAdsgeoPlugin parameter to libraries/lib-remotehost.inc, the 2 filename parameter to admin/report-index, or the 3 phpAdsconfigmyfooter...

CVE-2007-0485

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter...

CVE-2007-0486

Multiple PHP remote file inclusion vulnerabilities in Openads aka phpAdsNew 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAdsgeoPlugin parameter to libraries/lib-remotehost.inc, the 2 filename parameter to admin/report-index, or the 3 phpAdsconfigmyfooter...

CVE-2007-0489

PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-0497: Undefined Security Weakness

PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...

CVE-2007-0487

PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used...

CVE-2007-0485: Undefined Security Weakness

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter...

CVE-2007-0487: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used...

CVE-2007-0491: Undefined Security Weakness

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2007-0501: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators adv-random-gen allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter...

CVE-2007-0489: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-0499: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the envincpath parameter...

CVE-2007-0486: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Openads aka phpAdsNew 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAdsgeoPlugin parameter to libraries/lib-remotehost.inc, the 2 filename parameter to admin/report-index, or the 3 phpAdsconfigmyfooter...