SQL injection vulnerability in DayuCMS backend content.inc.php page

DayuCMS is a marketing-centered CMS system that incorporates search engine algorithms to facilitate businesses and individual webmasters. A SQL injection vulnerability exists in the content.inc.php page of DayuCMS backend. An attacker can exploit the vulnerability to obtain sensitive database...

CVE-2008-3166: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

CVE-2008-3167: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...