PT-2011-1383

Name of the Vulnerable Software and Affected Versions MediaWiki version 1.16 beta Description A remote file inclusion issue in MediaWikiParserTest.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. Recommendations For MediaWiki version 1.16 beta, consider...

PT-2011-1596

Name of the Vulnerable Software and Affected Versions CrawlTrack versions prior to 3.2.7 Description The issue allows remote attackers to execute arbitrary PHP code. This is possible when a public stats page is provided. The exact vectors used for the attack are not specified. Recommendations For...

CVE-2010-4558

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification Trojan Horse in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code...

PT-2010-5538

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 2.6.11 through 2.6.12 Description The issue allows remote attackers to execute arbitrary PHP code due to an externally introduced modification in the getTopTen method in inc/Faq.php. Recommendations For versions 2.6.11 and...

PT-2010-5399

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue concerns an incomplete blacklist vulnerability in the safe url extraclean function within the ajax.php file. This vulnerability allows remote attackers to execute arbitrary PHP code by...

CVE-2010-4283: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in extras/pandoradiag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv1 parameter...

PT-2010-5401

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the argv1 parameter in the extras/pandora diag.php file. Recommendations For versions prior to 3.1.1, update to versio...

Pandora FMS <= 3.1 Multiple Input Validation Vulnerabilities - Active Check

Pandora FMS is prone to an authentication bypass vulnerability as well as the following input-validation vulnerabilities: - A commandinjection vulnerability - Multiple SQL injection SQLi vulnerabilities - A remote file include RFI vulnerability - An arbitrary PHP code execution vulnerability -...

CVE-2010-3742: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 meta or 2 phpincdir parameter, a different issue than CVE-2010-3307...

PT-2010-5036

Name of the Vulnerable Software and Affected Versions Free Simple CMS version 1.0 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the meta or phpincdir parameter in the themes/default/index.php file. Recommendations For Free Simple CMS version 1.0, conside...

CVE-2010-3204: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

CVE-2010-3209: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to 1 Config/Container.php and 2 HTML/QuickForm.php in fog/lib/pear/, the 3 driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the...

MyBackup 1.4.0 Multiple Security Vulnerabilities

MyBackup is prone to multiple security vulnerabilities. These vulnerabilities include a directory-traversal vulnerability and a arbitrary PHP code execution vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary php code in the context of the affected site or obtain...

CVE-2009-4993: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-3055

The configuration setup script aka scripts/setup.php in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request...

CVE-2010-3055: Undefined Security Weakness

The configuration setup script aka scripts/setup.php in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request...

CVE-2010-2918: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites comjoomla-visites component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2010-2681: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in the SEF404x comsef component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig.absolute.path parameter to index.php...

CVE-2010-2341: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

CVE-2010-2315: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...