CVE-2006-3758: Undefined Security Weakness

inc/init.php in Archive Mode Light in MyBB aka MyBulletinBoard 1.1.4 calls the extract function with EXTROVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the SERVERHTTPCLIENTIP parameter in...

CVE-2006-1912: Undefined Security Weakness

MyBB MyBulletinBoard 1.1.0 does not set the constant KILLGLOBAL variable in 1 global.php and 2 inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting XSS or SQL injectio...

vBulletin Init.PHP unspecified vulnerability

The remote host is running vBulletin, a web based bulletin board system written in PHP. The remote version of this software is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation...

CVE-2004-1508: Undefined Security Weakness

init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the userinc parameter...

VBulletin Init.PHP Unspecified Remote Vulnerability

Binary data 2535.prm...

vBulletin includes/init.php Unspecified Vulnerability

According to its banner, the remote version of vBulletin is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation requires that PHP's 'registerglobals' setting be enabled. %NASLMINLEVEL...

CVE-2002-1412: Undefined Security Weakness

Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERYBASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script...