EUVD-2006-5392

Malware in sbrugna...

EUVD-2005-1441

Malware in sbrugna...

CVE-2009-2769: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter...

ultrize timesheet 1.2.2 - Remote File Inclusion

ultrize timesheet 1.2.2 - Remote File Inclusion ===================================================================================== o Ultrize TimeSheet 1.2.2 Remote File Inclusion Vulnerability Software : Ultrize TimeSheet version 1.2.2 Vendor : http://www.ultrize.com/ Download :...

CVE-2007-3306: Undefined Security Weakness

PHP remote file inclusion vulnerability in crontab/runbilling.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter, a different vector than CVE-2006-4489...

CVE-2007-2411: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue...

CVE-2007-0314: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...

CVE-2007-0190

CVE-2007-0190 is a PHP remote file inclusion vulnerability in the edit_address.php component of the edit-x ecommerce platform. An attacker can force the application to include a remote URL via the include_dir parameter, enabling arbitrary PHP code execution on the server. Affected product: edit-x...

CVE-2007-0190: Undefined Security Weakness

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

MiniBill config[include_dir]参数远程文件包含漏洞

MiniBill是用PHP编写的ISP计费软件。 MiniBill处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 MiniBill的actions/ipn.php脚本没有正确验证configincludedir参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。 Ultrize LLC MiniBill v1.22 Beta 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-3041: Undefined Security Weakness

PHP remote file inclusion vulnerability in Ltwcalendar/calendar.php in Codewalkers Ltwcalendar 4.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the ltwconfigincludedir parameter. NOTE: CVE disputes this claim, since the $ltwconfigincludedir variable is defined as a static...

CVE-2005-1438

The connected documents confirm a Remote File Include vulnerability in osTicket variants, specifically CVE-2005-1438, via the include_dir parameter in main.php. The issue affects osTicket versions up to 1.2.7 (per Tenable NASL “osTicket <= 1.2.7 Multiple Vulnerabilities”) and is included among...

CVE-2005-1438

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the includedir parameter...

CVE-2005-1438: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the includedir parameter...