CVE-2009-0495

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter...

CVE-2009-0441

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0444

GRBoard 1.8 is vulnerable to multiple PHP remote file inclusion attacks when register_globals is on and magic_quotes_gpc is off. The flaw allows an attacker-controlled URL parameter (theme) to cause arbitrary PHP code execution via various theme-related scripts (e.g., 179_squarebox_*/view.php) an...

CVE-2008-6066

CVE-2008-6066 concerns multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the root_path parameter to six files in the classes/ directory (modules.php, ManagerResource.class.php, ManagerRightsR...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

CVE-2009-0430

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamelarootpath parameter...

CVE-2009-0347: Improper Link Resolution Before File Access

Open redirect vulnerability in cs.html in the Autonomy formerly Verity Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2009-0302: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...

Remote file inclusion

PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

Unfixed Frame Redirect vulnerability at www.merkleinc.com

Security researcher skathgh420, has submitted on 01/05/2009 a Frame Redirect vulnerability affecting www.merkleinc.com, which at the time of submission ranked 421128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator comfeederator component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 mosConfigabsolutepath parameter to a addtmsp.php, b edittmsp.php and c tmsp.php in includes/tmsp...

Remote file inclusion

PHP remote file inclusion vulnerability in sloginlib.inc.php in Simple Text-File Login Script SiTeFiLo 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sloginpath parameter...

CVE-2008-5739: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the incfunction parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2008-5332

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

Remote file inclusion

PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox aka IdeBox 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter...