Remote file inclusion

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...

CVE-2008-5287

The CVE-2008-5287 entry documents a SQL injection vulnerability in the Werner Hilversum FAQ Manager 1.2, specifically in catagorie.php where the cat_id parameter can be manipulated to execute arbitrary SQL commands. Affected component: catagorie.php; vulnerable context: handling of cat_id in the ...

CVE-2008-5288

CVE-2008-5288 affects Werner Hilversum FAQ Manager 1.2. It is a PHP remote file inclusion vulnerability in include/header.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied in the config_path parameter. Affects versions/hosting context are ...

CVE-2008-5288: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...

CVE-2008-5287: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...