EUVD-2008-3554

Malware in sbrugna...

EUVD-2002-2113

Malware in sbrugna...

CVE-2007-6495: Undefined Security Weakness

incnewuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named 1 db, 2 www, 3 Special, and 4 log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to...

EUVD-2006-4877

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to 1 fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or 2 fckeditor/editor/dialog/fcklink.php...

CVE-2006-4890: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to 1 fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or 2 fckeditor/editor/dialog/fcklink.php...

CVE-2002-2134

The CVE concerns PEEL 1.0b, where the script haut.php allows remote attackers to execute arbitrary PHP code by altering the dirroot parameter to point to a URL on a remote server that contains code in a lang.php file. This establishes a remote code execution path via manipulation of dirroot, enab...

CVE-2002-2134

haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file...

CVE-2002-2134: Undefined Security Weakness

haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file...