CVE-2011-3704: Exposure of Sensitive Information to an Unauthorized Actor

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php...

WeBid 0.7.3 Remote File Inclusion

ECHOADV104$2009 ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities ----------------------------------------------------------------------------------------- Author : K-159 Date ...

CVE-2008-4164: Exposure of Sensitive Information to an Unauthorized Actor

cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

Authentication flaw

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

CVE-2008-0293

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

CVE-2008-0293: Undefined Security Weakness

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in InterWorx Hosting Control Panel InterWorx-CP Webmaster Level SiteWorx 3.0.2 1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php; and allow remote authenticated users to inject arbitrary web script or HT...

CVE-2006-2578: Undefined Security Weakness

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-2521

PHP remote file inclusion vulnerability CVE-2006-2521 affects phpMyDirectory 10.4.4 and earlier. The flaw is in cron.php where ROOT_PATH is used to include a URL, enabling remote execution of arbitrary PHP code. Exploitation specifics and remediation steps are not provided in the connected docume...

CVE-2006-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpMyDirectory = 10.4.4 ROOTPATH Remote Inclusion Vulnerability =================================================================== Title : phpMyDirectory = 10.4.4 Remote...

phpMyDirectory 10.4.4 - ROOT_PATH Remote File Inclusion

phpMyDirectory 10.4.4 - ROOTPATH Remote File Inclusion Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com -...