CVE-2010-1153: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...

Design/Logic Flaw

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...

CVE-2006-1789: Undefined Security Weakness

Directory traversal vulnerability in pajaxcalldispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files via the $className variable...