EUVD-2015-7305

Malware in sbrugna...

CVE-2015-7381: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database aka refbase through 0.9.6 allow remote attackers to execute arbitrary PHP code via the 1 pathToMYSQL or 2 databaseStructureFile parameter, a different issue than CVE-2015-6008...

PT-2015-7540

Name of the Vulnerable Software and Affected Versions refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary PHP code via the pathToMYSQL or databaseStructureFile parameter in the install.php file. Recommendations For versions prior to 0.9.7, update to...