8 matches found
EUVD-2016-1277
Malware in sbrugna...
EUVD-2016-1276
Malware in sbrugna...
EUVD-2013-3952
Malware in sbrugna...
EUVD-2010-1966
Malware in sbrugna...
CVE-2023-6623
The CVE-2023-6623 entry corresponds to a Local File Inclusion vulnerability in the WordPress Essential Blocks plugin prior to version 4.4.3. Several connected sources confirm that unauthenticated attackers can overwrite local variables when rendering templates via the REST API, potentially enabli...
Directory traversal
Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...
CVE-2008-5186
The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...
CVE-2008-3179
The CVE-2008-3179 entry concerns Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7. It describes a directory traversal vulnerability in website.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the page parameter. Root cause: impro...