CVE-2006-0688

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2006-0688

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2006-0688

CVE-2006-0688 describes a PHP remote file inclusion vulnerability in the NiceCoder Indexu product, affecting versions 5.0.0 and 5.0.1. The flaw arises in application.php, allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the base_path parameter. The NVD entry indicate...

CVE-2006-0688: Undefined Security Weakness

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

dotProject 2.0 - modulespublicdate_format.php?baseDir Remote File Inclusion

dotProject 2.0 - modulespublicdateformat.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

dotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

CVE-2006-0659

Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...

Design/Logic Flaw

Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...

CVE-2006-0659

CVE-2006-0659 concerns multiple PHP remote code execution vulnerabilities in RunCMS 1.2 and earlier, arising when register_globals and allow_url_fopen are enabled. An attacker can trigger arbitrary code execution via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer...

CVE-2006-0659

Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...

CVE-2006-0565

CVE-2006-0565 affects Loudblog 0.4 and earlier. The vulnerability is a PHP remote file include in inc/backend_settings.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the $GLOBALS[path] parameter. The NVD entries describe that remote code execution is possible, wit...

CVE-2006-0565: Improper Control of Generation of Code

PHP remote file include vulnerability in inc/backendsettings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALSpath parameter...

Code injection

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2006-0546: Undefined Security Weakness

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2003-1292

CVE-2003-1292 concerns ashNews 0.83. The vulnerability is a PHP remote file inclusion (RFI) where an attacker can use a URL in the pathtoashnews parameter to ashnews.php and ashheadlines.php to include and execute remote files. Affected software: ashNews 0.83. The CVSS details from NVD indicate a...

CVE-2003-1292: Undefined Security Weakness

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to 1 ashnews.php and 2 ashheadlines.php...

PmWiki 2.1 - Multiple Input Validation Vulnerabilities

PmWiki 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include...

PmWiki 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include vulnerability. Exploitation of this issue will result in...

CVE-2006-0171

PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE...