CVE-2007-5628

PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site TOWels 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the pageHeaderFile parameter...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication. The connect method in lib/net/http.rb in the 1 Net::HTTP and 2 Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName CN field in a server certificate matches the domain name in an HTTP...