Remote file inclusion

PHP remote file inclusion vulnerability in sendreminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483...

CVE-2008-2769

PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfigauthsmfpath parameter...

CVE-2008-2769

PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfigauthsmfpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter...

CVE-2008-2689

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

Unfixed XSS vulnerability at www.sworlandoforsale.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.sworlandoforsale.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Crlf injection

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...

CVE-2008-1770

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...

Unfixed XSS vulnerability at www.stellenanzeigen.de

Security researcher Renoized, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting www.stellenanzeigen.de, which at the time of submission ranked 22520 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Remote file inclusion

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the pagesdir parameter...

CVE-2008-2480

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the pagesdir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in chreadalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the readxmlinclude parameter...

CVE-2008-2341

PHP remote file inclusion vulnerability in chreadalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the readxmlinclude parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2008-2220

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGLANGUAGECPATH parameter to modules/forum/embedforum.php and the 2...

Remote file inclusion

PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...

CVE-2008-2228

PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...

CVE-2008-2199

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...