Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configpathMod parameter to index.php in 1 mod/image/, 2 mod/liens/, 3 mod/liste/, 4 mod/special/, or 5 mod/texte/...

CVE-2007-2572: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/noevents/templates/mfatheme.php in NoAh aka PHP Content Architect, phparch 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls1 parameter...

CVE-2007-2569: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendlypath parameter to 1 core/data/yaml.inc.php, or load.php in 2 core/data/, 3 core/display/, or 4 core/support/...

CVE-2007-2575: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in watermark.php in the vm aka Jean-Francois Laflamme watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter...

CVE-2007-2573: Undefined Security Weakness

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...

CVE-2007-2558: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS pfa CMS 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter. NOTE: CVE disputes this issue since $repinc is set to a constant value before use...

CVE-2007-2545: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the systempath parameter to 1 blocks/headerfile.php, 2 files/blocks/latestfiles.php, 3 filters/headerfile.php, 4 forums/blocks/latestposts.php, 5...

CVE-2007-2542: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-2531: Undefined Security Weakness

PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execute arbitrary PHP code via a URL in the beryliumroot parameter...

CVE-2007-2530: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execute arbitrary PHP code via a URL in the RESPATH parameter to 1 dosearch.php or 2 printfriendly.php...

CVE-2007-2541: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/ajaxlistado.php in Versado CMS 1.07 allows remote attackers to execute arbitrary PHP code via a URL in the urlModulo parameter...

CVE-2007-2527

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to 1 dplogs.php or 2 index.php...

nuked176-exec.txt

Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file require the PhpSploit class. require"phpsploitclass.php"; If you want to use this class, the latest version can be downloaded from acid-root.new.fr. $xpl = new phpsploit;...

CVE-2007-2527: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to 1 dplogs.php or 2 index.php...

CVE-2007-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

CVE-2007-2481: Undefined Security Weakness

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...

CVE-2007-2457: Undefined Security Weakness

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfgsysbasepath parameter...

CVE-2007-2458: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgsysbasepath parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457...

CVE-2007-2424: Undefined Security Weakness

PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...

CVE-2007-2422: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...