3343 matches found
CVE-2008-1126: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter...
CVE-2008-1074: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...
CVE-2008-1067
Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONpath parameter to 1 ezmlm.php and 2 tools/updatetranslations.php...
Sql injection
Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter...
CVE-2008-1059
PHP remote file inclusion vulnerability in modules/syntaxhighlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2008-1060
Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter...
CVE-2008-1067: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONpath parameter to 1 ezmlm.php and 2 tools/updatetranslations.php...
CVE-2008-1068: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 Vert/index.php, 2 Noir/index.php, and 3 Bleu/index.php in template/, different vectors than CVE-2008-0645...
CVE-2008-1046: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the opfooterbody parameter...
CVE-2008-0803: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...
Remote file inclusion
PHP remote file inclusion vulnerability in membershelp.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter...
CVE-2008-0743
PHP remote file inclusion vulnerability in membershelp.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter...
CVE-2008-0743: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in membershelp.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter...
CVE-2008-0645: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 config/conf-activation.php, 2 menu/item.php, and 3 modules/confmodules.php in admin/system/; and 4 system/login.php. NOTE: th...
CVE-2008-0635: Improper Control of Generation of Code
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...
CVE-2008-0572
Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MMGLOBALShome parameter to 1 acweb/adminindex.php; and 2 ask.inc.php, 3 learn.inc.php, 4 manage.inc.php, 5 mind.inc.php, and 6 sensory.inc.php in include/...
CVE-2008-0572: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MMGLOBALShome parameter to 1 acweb/adminindex.php; and 2 ask.inc.php, 3 learn.inc.php, 4 manage.inc.php, 5 mind.inc.php, and 6 sensory.inc.php in include/...
CVE-2008-0566: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtopublicprogram parameter...
CVE-2008-0560: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms contactforms, a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a...