CVE-2007-0181

The CVE-2007-0181 entry describes a PHP remote file inclusion in the magic photo storage website, triggered through the _config[site_path] parameter in include/common_function.php. The underlying issue is insufficient validation of a URL-like value, allowing an attacker to cause arbitrary PHP cod...

CVE-2007-0181

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the AMVserverpath parameter...

CVE-2007-0167

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...

EUVD-2007-0171

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...

CVE-2007-0143

Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the customadminpath parameter to 1 index.php or 2 archives.php...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the currentpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

CVE-2007-0050

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

CVE-2007-0050

OpenPinboard 2.0 is affected by a PHP remote file inclusion in index.php, exploitable via the language parameter. The underlying issue is contested (variable set before use), with CVE notes indicating a small time window of risk during installation. Affected component: index.php of OpenPinboard 2...

CVE-2006-6838

Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...

CVE-2006-6793: Undefined Security Weakness

PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-6770

Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...

CVE-2006-6770

Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...

CVE-2006-6764

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book KISGB, when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the defaultpathtothemes parameter...

CVE-2003-1314

PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook EMGB 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgbadminpath parameter...

CVE-2006-6738

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6726

PHP remote file inclusion vulnerability in inertianewsmain.php in inertianews 0.02 beta allows remote attackers to execute arbitrary PHP code via a URL in the inewspath parameter...

CVE-2006-6720

PHP remote file inclusion vulnerability in admin/indexsitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the VIEW parameter...

CVE-2006-6710

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...