CVE-2010-3209

Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to 1 Config/Container.php and 2 HTML/QuickForm.php in fog/lib/pear/, the 3 driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the...

CVE-2010-3206

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3204

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to 1 Config/Container.php and 2 HTML/QuickForm.php in fog/lib/pear/, the 3 driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3209

Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to 1 Config/Container.php and 2 HTML/QuickForm.php in fog/lib/pear/, the 3 driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the...

CVE-2010-3204

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

CVE-2010-3204

Pecio CMS 2.0.5 is affected by multiple remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the template parameter to one of four scripts (post.php, article.php, blog.php, or home.php) under pec_templates/nova-blu...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2010-3209

Seagull 0.6.7 is vulnerable to multiple remote file inclusion in PHP, allowing remote code execution. The vulnerabilities occur via includeFile in Config/Container.php and HTML/QuickForm.php (fog/lib/pear/), via driverpath in fog/lib/pear/DB/NestedSet.php, and via path in fog/lib/pear/DB/NestedSe...

CVE-2010-3210

CVE-2010-3210 affects the Multi-lingual E-Commerce System 0.2. The issue is multiple PHP remote file inclusion in inc/ via include_path in scripts (checkout2-CYM.php, checkout2-EN.php, checkout2-FR.php, cat-FR.php, cat-EN.php, cat-CYM.php, checkout1-CYM.php, checkout1-EN.php, checkout1-FR.php, pr...

CVE-2010-3210

Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 checkout2-CYM.php, 2 checkout2-EN.php, 3 checkout2-FR.php, 4 cat-FR.php, 5 cat-EN.php, 6 cat-CYM.php, 7...

CVE-2010-3205

CVE-2010-3205 affects Textpattern CMS 4.2.0. Affected component: index.php, with a PHP remote file inclusion vulnerability via the inc parameter, enabling execution of arbitrary PHP code by an attacker-controlled URL. Root cause: improper handling of the inc parameter leads to remote file inclusi...

CVE-2010-3206

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3206

DiY-CMS 1.0 is vulnerable to multiple remote file inclusion (RFI) flaws. The issues arise from unvalidated user input in three vectors: (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions...

TBDev 2.0 - Remote File Inclusion SQL Injection

TBDev 2.0 - Remote File Inclusion SQL Injection source: https://www.securityfocus.com/bid/43004/info TBDev is prone to multiple input-validation vulnerabilities, including a remote file-include issue and an SQL-injection issue. A successful exploit may allow an attacker to execute malicious code...

vbShout 5.2.2 - LocalRemote File Inclusion

vbShout 5.2.2 - LocalRemote File Inclusion + + Title: vbShout 5.2.2 Remote/Local File Inlcusion Mod/Admin + Author: fred777 - fred777.5x.to + Link: http://www.dragonbyte-tech.com/vbecommerce.php?do=purchase&act=product&id=2 + Vuln: vbshout.php?do=path/fileNULL-Byte + Greetzz to: SceneCoderz +...

dompdf 0.6.0 beta1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== dompdf 0.6.0 beta1 Remote File Inclusion Vulnerability ====================================================== ==================================================== x ExpL0it TitLe : apps...