5 matches found
CVE-2008-6491
The CVE-2008-6491 entry affects PHPGKit 0.9, where the PHP remote file inclusion flaw resides in the connexion.php module. An attacker can cause arbitrary PHP code execution by supplying a URL in the DOCUMENT_ROOT parameter, enabling remote code execution via a crafted request. This vulnerability...
CVE-2008-6491: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7089
SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-7089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...