CVE-2026-43918: Insufficient Session Expiration

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked inactive, existing authenticated sessions are not invalidated. The session identity loaders in src/di.php loggedinclient and loggedinadmin...

AjaxPortal di.php File Inclusion (CVE-2009-2262)

A remote file inclusion vulnerability has been reported in AjaxPortal. The vulnerability is caused due to improper handling of crafted URL using the "pathtoserverdata" parameter. Successful exploitation will let the remote attacker to execute arbitrary PHP code...

CVE-2009-2262

AjaxPortal 3.0 is affected by a PHP remote file inclusion via install/di.php, exploitable through the pathtoserverdata parameter to execute arbitrary PHP code. The issue arises from improper handling of crafted URLs in the parameter, with the installation manual advising deletion of the install/ ...

CVE-2009-2262: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder...

AjaxPortal v3.0 Remote File Inclusion Vulnerability

/=============================================================================================================================================== | | o AjaxPortal v3.0 Remote File Inclusion Vulnerability | | Software : AjaxPortal v3.0 | Vendor :...