phpBG 0.9.1 - 'rootdir' Remote File Inclusion

phpBG 0.9.1 rootdir Remote File Inclusion Vulnerability D.Script: http://phpbg.sourceforge.net/ POC: /intern/admin/other/backup.php?admin=1&rootdir=Shell /intern/admin/?rootdir=Shell /intern/clan/memberadd.php?rootdir=Shell /intern/config/key2.php?rootdir=Shell...

CVE-2007-1060: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when registerglobals and allowfopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to 1 createemails.inc.php and 2 sendemails.inc.php in...

CVE-2007-0863

PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tcconfigrootdir parameter to 1 upgrade.php, 2 paintsave.php, 3 menu.php, 4 manage.php, and 5 banned.php. NOTE: his issue has been disputed by reliable third parties, who...

CVE-2007-0863: Undefined Security Weakness

PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tcconfigrootdir parameter to 1 upgrade.php, 2 paintsave.php, 3 menu.php, 4 manage.php, and 5 banned.php. NOTE: his issue has been disputed by reliable third parties, who...

PT-2007-2305 · Unknown · Trevorchan

Name of the Vulnerable Software and Affected Versions: Trevorchan versions 0.7 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary code via the tc configrootdir parameter to several API endpoints, including "upgrade.php", "paint save.php", "menu.php...

CVE-2007-0837: Undefined Security Weakness

PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

PT-2006-5835 · Net2Ftp · Net2Ftp

Name of the Vulnerable Software and Affected Versions: net2ftp versions 0.1 through 0.62 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the application rootdir parameter. However, this issue has been disputed by a...

CVE-2006-4205: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including 1 Cache.class.php, 2 Customer.class.php, 3 Performance.class.php, 4 Project.class.php, 5...

CVE-2006-2144: Undefined Security Weakness

PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

CVE-2006-0064: Improper Control of Generation of Code

PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the globrootDir parameter...