CVE-2007-2575

PHP remote file inclusion vulnerability in watermark.php in the vm aka Jean-Francois Laflamme watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter...

CVE-2007-2572: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/noevents/templates/mfatheme.php in NoAh aka PHP Content Architect, phparch 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls1 parameter...

CVE-2007-2544: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...

CVE-2007-2558: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS pfa CMS 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter. NOTE: CVE disputes this issue since $repinc is set to a constant value before use...

CVE-2007-2541: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/ajaxlistado.php in Versado CMS 1.07 allows remote attackers to execute arbitrary PHP code via a URL in the urlModulo parameter...

CVE-2007-2545: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the systempath parameter to 1 blocks/headerfile.php, 2 files/blocks/latestfiles.php, 3 filters/headerfile.php, 4 forums/blocks/latestposts.php, 5...

CVE-2007-2531: Undefined Security Weakness

PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execute arbitrary PHP code via a URL in the beryliumroot parameter...

CVE-2007-2569: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendlypath parameter to 1 core/data/yaml.inc.php, or load.php in 2 core/data/, 3 core/display/, or 4 core/support/...

CVE-2007-2527: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to 1 dplogs.php or 2 index.php...

CVE-2007-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value...

WordPress WP Table Plugin <= 1.43 - Remote File Inclusion

Because of this vulnerability, the attackers can execute arbitrary PHP code via a URL in the "wpPATH" parameter. Solution Update the WordPress WP Table plugin to the latest available version at least 1.44...

CVE-2007-2481: Undefined Security Weakness

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter...

CVE-2007-2426

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter...

CVE-2007-2422: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...

CVE-2007-2474: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...

CVE-2007-2457: Undefined Security Weakness

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfgsysbasepath parameter...

CVE-2007-2458: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgsysbasepath parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457...

CVE-2007-2424: Undefined Security Weakness

PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...