Remote file inclusion

PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2009-3365

CVE-2009-3365 affects Aurora CMS 1.0.2 and is triggered through a PHP remote file inclusion in the install.plugin.php of the sysmanager addon, via the AURORA_MODULES_FOLDER parameter. The underlying issue is a vulnerable inclusion mechanism that allows an attacker to execute arbitrary PHP code by...

CVE-2009-3362

CVE-2009-3362 is a PHP remote file inclusion vulnerability affecting SZNews 2.7, specifically in printnews.php3. An attacker could supply a URL in the id parameter to cause arbitrary PHP code execution. The connected documents confirm the vulnerable component and the general impact but do not pro...

FSphp 0.2.1 Remote File Inclusion

Exploit for unknown platform in category web applications ================================= FSphp 0.2.1 Remote File Inclusion ================================= o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download...

FSphp 0.2.1 Remote File Inclusion

o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce $FSPHPLIB . "/path.php" ; lib/FSphp.php...

FSphp 0.2.1 Remote File Inclusion

No description provided by source. o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce $FSPHPL...

FSphp 0.2.1 - Remote File Inclusion

FSphp 0.2.1 - Remote File Inclusion o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce...

FSphp 0.2.1 - Remote File Inclusion

o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce $FSPHPLIB . "/path.php" ; lib/FSphp.php...

CVE-2009-3324

PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter...

CVE-2009-3307

Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHPLIB parameter to 1 FSphp.php, 2 navigation.php, and 3 pathwrite.php in lib/...

CVE-2009-3331

Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to 1 header.php, 2 submit.php, 3 submitted.php, and 4 autosubmitter/index.php...

CVE-2009-3312

PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the includeclass parameter...

CVE-2009-3323

Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini BAROSmini 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the barospath parameter to 1 include/commonfunctions.php, and the mainpath parameter to 2 libusers.php, 3 libstats.php, and 4...

Remote file inclusion

PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via a URL in the path parameter, a different vector than CVE-2008-0648...

Remote file inclusion

PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the includeclass parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit comkoesubmit component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini BAROSmini 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the barospath parameter to 1 include/commonfunctions.php, and the mainpath parameter to 2 libusers.php, 3 libstats.php, and 4...

Remote file inclusion

PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter...

CVE-2009-3306

CVE-2009-3306 is tied to ClearSite 4.50 and involves a remote file inclusion (RFI) in include/header.php. The underlying issue is unsanitized user input via the cs_base_path parameter, allowing an attacker to cause arbitrary PHP code execution. OpenVAS entries corroborate a header.php RFI vector ...

CVE-2009-3317

OpenSiteAdmin 0.9.7 BETA is affected by CVE-2009-3317, a PHP remote file inclusion vulnerability in pages/pageHeader.php. The issue allows an attacker to execute arbitrary PHP code by supplying a URL in the path parameter (a vector distinct from CVE-2008-0648). NVD notes this as a network-accessi...