9876 matches found
CVE-2006-2526: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in PHP Easy Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2006-2507: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 index.php, 2 song.php, 3 faq.php, 4 list.php, 5 genm3u.php, and 6 playlist.php...
XOOPS < 2.0.9.4 include/common.php nocommon Parameter Local File Inclusion
Binary data 3629.prm...
CVE-2005-1755
PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...
Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug found by: X0r1 release: 21.05.06 vulnerable code in sources\post.php at lines 32-35: ---------------------------------------------------------------------------------- ... global $VARS, $TEMPLATE, $fillan...
CVE-2005-1755: Undefined Security Weakness
PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...
Design/Logic Flaw
The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...
CVE-2006-2479
The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...
CVE-2006-2479
The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...
CVE-2006-2485: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/classtemplate.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezzarootpath parameter...
CVE-2006-2483: Undefined Security Weakness
PHP remote file inclusion vulnerability in cartcontent.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cartisproot parameter...
Artmedic NewsLetter 4.1 - 'Log.php' Remote Script Execution
source: https://www.securityfocus.com/bid/18047/info Artmedic Newsletter is prone to a remote PHP code-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to create files containing arbitrary conte...
[SA20156] ScozNews "CONFIG[main_path]" File Inclusion Vulnerabilities
TITLE: ScozNews "CONFIGmainpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA20156 VERIFY ADVISORY: http://secunia.com/advisories/20156/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ScozNews 1.x http://secunia.com/product/10016/ DESCRIPTION: Kacper has...
Remote file inclusion
PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManagerPath parameter to ezusermanagerpwdforgott.php, possibly due to an issue in ezusermanagercore.inc.php...
CVE-2006-2424: Undefined Security Weakness
PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManagerPath parameter to ezusermanagerpwdforgott.php, possibly due to an issue in ezusermanagercore.inc.php...
Newsportal: code injection vulnerability
Hello, there is a code injection vulnerability in NewsPortal that could give everyone the ability to execute php code on the webserver where newsportal is installed. This bug should only occur if "registerglobals=on" is set in the php.ini. To remove the problem: - install the recent version:...
Squirrelcart cart_content.php cart_isp_root Parameter Remote File Inclusion
The remote host is running Squirrelcart, a shopping cart program written in PHP. The version of Squirrelcart installed on the remote host fails to sanitize user-supplied input to the 'cartisproot' parameter of the 'cartcontent.php' script before using it to include PHP code. Provided PHP's...
Remote file inclusion
PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter cfg'popphotobasepath' variable. NOTE: Pixaria has notified CVE...
[SA20115] Php Blue Dragon CMS "vsDragonRootPath" File Inclusion
TITLE: Php Blue Dragon CMS "vsDragonRootPath" File Inclusion SECUNIA ADVISORY ID: SA20115 VERIFY ADVISORY: http://secunia.com/advisories/20115/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Php Blue Dragon CMS 2.x http://secunia.com/product/9942/ DESCRIPTION: Kacper...
[SA20087] PopPhoto "cfg[popphoto_base_path]" File Inclusion Vulnerability
TITLE: PopPhoto "cfgpopphotobasepath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20087 VERIFY ADVISORY: http://secunia.com/advisories/20087/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PopPhoto 3.x http://secunia.com/product/9926/ DESCRIPTION: VietMafia h...