CVE-2010-0403: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in about.php in phpGroupWare phpgw before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the app parameter...

CVE-2007-1620: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

PHP DB Designer <= 1.02 Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP DB Designer = 1.02 Remote File Include Vulnerabilities =========================================================== PHP DB Designer = 1.02 Remote File Include Exploit D.Script:...

freeqboard-rfi.txt

freeqboard = 1.1 qbpath Remote File Include Vulnerability Author: Mr.3FReeT Softname: freeqboard code in : about.php , contact.php , delete.php , faq.php , index.php include "config.php"; include $qbpath."incs/mysql.php"; Exploit : """""""" www.site.com/path/index.php?qbpath=shellcode.txt?...

CVE-2006-3475: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qbpath parameter to 1 index.php, 2 about.php, 3 contact.php, 4 delete.php, 5 faq.php, 6 features.php or 7 history.php, a different set of vectors than...

CVE-2006-1922: Undefined Security Weakness

PHP remote file inclusion vulnerability in 1 about.php or 2 auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CVE-2005-3086: Undefined Security Weakness

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter...

contentServ.txt

---------------------------------------------------------------------- -- ContentServ still features remote reading of arbitrary files -- ------------------------- [email protected] ------------------------ / Boring PHP bug warning: """""""""""""""""""""""""""""" By reading boring PHP bug...