CVE-2007-2278: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the path parameter to library/adodb/adodb.inc.php, 2 the abspatheditor parameter to library/editor/editor.php, or 3 the cfgfiletoload parameter to...

phpWebThings core/editor.php editor_insert_bottom Parameter Remote File Inclusion

The remote web server is running phpWebThings, a PHP based photo gallery management system. The version of phpWebThings installed on the remote host fails to sanitize input to the 'editorinsertbottom' parameter before using it in the 'core/editor.php' script to include PHP code. Provided PHP's...

CVE-2006-6042: Undefined Security Weakness

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the editorinsertbottom parameter...

PHPWebThings 1.5.2 - editor.php Remote File Inclusion

PHPWebThings 1.5.2 - editor.php Remote File Inclusion +------------------------------------------------------------------------------------------- + phpWebThings 1.5.2 editor.php Remote File Include Vulnerability...

CVE-2006-4837: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...