CVE-2008-2687

CVE-2008-2687 affects ProManager 0.73. A directory traversal flaw in inc/config.php allows remote attackers to include and execute arbitrary local files by using a .. in the language parameter, enabling arbitrary code execution on affected systems. No remediation details are provided in the suppl...

CVE-2006-2877

CVE-2006-2877 describes a PHP remote file inclusion in Bookmark4U 2.0.0 and earlier. An attacker can cause the application to include arbitrary PHP files via the include_prefix parameter in one of four files: inc/dbase.php, inc/config.php, inc/common.php, or inc/function.php. The advisory notes t...