CVE-2008-1051: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/bodycomm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

PT-2007-3644 · Bloofox · Bloofoxcms

Name of the Vulnerable Software and Affected Versions: BlooFoxCMS version 0.2.2 Description: The issue concerns a PHP remote file inclusion vulnerability in the install/index.php file of BlooFoxCMS. This vulnerability potentially allows remote attackers to execute arbitrary PHP code via a URL in...

CVE-2007-2082

Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this...

CVE-2007-2082: Undefined Security Weakness

Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this...

CVE-2006-4915

CVE-2006-4915 describes a Cross-site scripting (XSS) vulnerability in index.php of Innovate Portal 2.0, exploitable by injecting arbitrary web script/HTML via the content parameter. According to the linked sources, the vulnerability is non-authenticated (per CVSS: network attack vector, no user a...

CVE-2006-4915: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter...

PT-2006-3771

Name of the Vulnerable Software and Affected Versions Realty Portal version 5.1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the cat parameter in the content.php file. Recommendations For Realty Portal...

CVE-2005-4407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 content and 2 criteria parameters...

CVE-2005-3861: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

CVE-2004-2042

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...

CVE-2001-1115: Undefined Security Weakness

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...