Design/Logic Flaw

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

CVE-2007-5055

CVE-2007-5055 affects iziContents 1 RC6 and earlier. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files via a .. in the admin_home parameter to modules/poll/poll_summary.php or the rootdp parameter to include/db.php. Connected reco...

CVE-2007-5053

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

CVE-2007-5053: Improper Control of Generation of Code

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

CVE-2007-5054: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to 1 search/search.php, 2 poll/inlinepoll.php, 3 poll/showpoll.php, 4 links/showlinks.php, or 5 links/submitlinks.php in...

CVE-2007-5055: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php...