CVE-2007-2985: Undefined Security Weakness

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheaplogin cookie value to the administrator's username, which can be used to 1 obtain sensitive information, including the administrator password, via settings.php or 2 upload and execute arbitrary PHP code via an updatedoc...

Remote file inclusion

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2007-2939

Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to 1 ITX.php, 2 ITError.php, or 3 IT.php in include/pear/...

CVE-2007-2941: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map vBGSiteMap 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to 1 vbgsitemap/vbgsitemap-config.php or 2 vbgsitemap/vbgsitemap-vbseo.php...

CVE-2007-2943: Undefined Security Weakness

PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2007-2940: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b 1.0 Beta allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to 1 skin/html/table.php or 2 login.php...

CVE-2007-2937: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the siteurl parameter...

CVE-2007-2936: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b Beta 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the securelib parameter to 1 conf.php or 2 cp2.php...

CVE-2007-2947: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the rootprefix parameter to 1 index.php, 2 emailsubscribe.php, 3 download.php, or 4 development.php...

CVE-2007-2891: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 bankdataroot parameter to modules/bank/includes/design/main.inc.php, or the 2 fmdataroot parameter to a includes/config/master.inc.php or b...

CVE-2007-2859: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pathsimpgb parameter to 1 guestbook.php, 2 search.php, 3 mailer.php, 4 avatars.php, 5 ccode.php, 6 comments.php, 7 emoticons.php, 8 gbdownload.php, and possibl...

CVE-2007-2861: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News SAXON 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 news.php, 2 preview.php, or 3 archive-display.php...

CVE-2007-2826: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSbasedir parameter...

CVE-2007-2816: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 test1.php, 2 blackorange.php, 3 default.php, 4 frames1.php, 5 frames1top.php, 7 test2.php, 8 test3.php, 9 test4.php, 10 test5.php, 11...

CVE-2007-2793: Undefined Security Weakness

PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...

CVE-2007-2779

PHP remote file inclusion vulnerability in templatecsv.php in Libstats 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rInfocontent parameter...

CVE-2007-2774

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...

CVE-2007-2779: Undefined Security Weakness

PHP remote file inclusion vulnerability in templatecsv.php in Libstats 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rInfocontent parameter...

CVE-2007-2774: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...

CVE-2007-2762

Multiple PHP remote file inclusion vulnerabilities in Build it Fast bif3 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the peardir parameter to Base/Application.php, or the 2 sysdir parameter to a Footer.php, b widget.BifContainer.php, c widget.BifRoot.php, d...