CVE-2007-4942

CVE-2007-4942 describes a PHP remote file inclusion in Focus/SIS 1.0, specifically in modules/Discipline/StudentFieldBreakdown.php, exploitable via a URL in the FocusPath parameter. The vulnerability could allow remote attackers to execute arbitrary PHP code with partial impact to confidentiality...

CVE-2007-4942: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

CVE-2007-4806: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...