CVE-2007-5102: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-1582

CVE-2006-1582 describes a cross-site scripting (XSS) vulnerability in Blank'N'Berg 0.2, exploitable via the _path parameter in index.php. The root cause is an injection of arbitrary web script/HTML, potentially stemming from a directory traversal-related issue noted in the description. Affected s...

CVE-2006-1581: Undefined Security Weakness

Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2006-1582: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from the directory traversal issue...

Ubuntu 4.10 / 5.04 / 5.10 : php4, php5 vulnerabilities (USN-232-1)

Eric Romang discovered a local Denial of Service vulnerability in the handling of the 'session.savepath' parameter in PHP's Apache 2.0 module. By setting this parameter to an invalid value in an .htaccess file, a local user could crash the Apache server. CVE-2005-3319 A Denial of Service flaw was...