EUVD-2006-4150

Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibrary parameter to 1 BaseCommand.php, 2 BaseLoader.php, and 3 BaseView.php...

CVE-2006-4160

CVE-2006-4160 involves multiple PHP remote file inclusion (RFI) vulnerabilities in MVCnPHP 3.0 by Tony Bibbs and Vincent Furia. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL for the glConf[path_library] parameter in (1) BaseCommand.php, (2) BaseLoader.p...