CVE-2005-4556

A PHP remote file include vulnerability exists in IceWarp Web Mail 5.5.1 , which is integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 . When register_globals is enabled, remote attackers can exploit the lang_settings and language parameters in accounts/inc/in...

CVE-2005-4556: Undefined Security Weakness

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when registerglobals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the 1 langsettings and 2...

VulnCheck KEV: CVE-2005-4556

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when registerglobals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the 1 langsettings and 2...

CVE-2005-4467: Undefined Security Weakness

Directory traversal vulnerability in helptextvars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. dot dot in the PGVBASEDIRECTORY parameter...

CVE-2005-4468: Undefined Security Weakness

PHP remote file include vulnerability in helptextvars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGVBASEDIRECTORY parameter...

CVE-2005-4462

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter...

CVE-2005-4462

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter...

CVE-2005-4462

The CVE-2005-4462 entry concerns Tolva PHP website system 0.1.0, where a PHP remote file inclusion in usermods.php via the ROOT parameter allows arbitrary code execution from a URL. Documents do not provide an official fix or patched version; remediation details are not stated. If exploitable, im...

Tolva PHP website system Remote File Include

Script: Tolva PHP website system Version: 0.1.0 Language: PHP Official Website: http://sourceforge.net/projects/twebs Problem: Remote File Include Discovered by: beford Description: ============ A complete collection of php scripts that work tightly together to create a highly customizable, dynam...

CVE-2005-4462: Undefined Security Weakness

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter...

CVE-2005-4302: Undefined Security Weakness

Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter...

CVE-2005-4287

PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php...

CVE-2005-4287

CVE-2005-4287 affects MarmaraWeb E-commerce. The vulnerability is a PHP remote file include in index.php via the page parameter, enabling remote code execution. The issue stems from insufficient validation of the included file path, leading to arbitrary code execution with the web server. Connect...

EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection

source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL injection vulnerability and a local file include...

CVE-2005-4287: Undefined Security Weakness

PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php...

Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo CMS versions 1.0.4.2 and prior are affected by these...

Limbo CMS 1.0.4.2 - option Traversal Arbitrary File Access

Limbo CMS 1.0.4.2 - option Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo...

Limbo CMS 1.0.4.2 - index.php?_SERVER[REMOTE_ADDR] Cross-Site Scripting

Limbo CMS 1.0.4.2 - index.php?SERVERREMOTEADDR Cross-Site Scripting source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include...

PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context ...

PHPCOIN 1.2.2 - includesdb.php?$_CCFG[_PKG_PATH_DBSE] Traversal Arbitrary File Access

PHPCOIN 1.2.2 - includesdb.php?$CCFGPKGPATHDBSE Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploi...