phpCMS 1.1.7 include/class.layout_phpcms.php PHPCMS_INCLUDEPATH Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

CVE-2005-1840

CVE-2005-1840 describes a directory traversal vulnerability in phpCMS 1.2.x before 1.2.1pl2, where an attacker can read or include arbitrary files by manipulating the language parameter to parser.php (via a .. path traversal). Affects phpCMS 1.2.x line; vulnerability demonstrated by using a dot-d...