2 matches found
CVE-2007-0797
The CVE-2007-0797 entry describes a PHP remote file inclusion in the framework/theme/settings.php of bluevirus-design SMA-DB 0.3.9 and earlier . The underlying issue is that an attacker can supply a URL via the pfad_z parameter to cause the PHP interpreter to include remote code, enabling arbitra...
EUVD-2007-0794
PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...