CVE-2009-3324

PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter...

CVE-2009-3306

PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter...

CVE-2009-3312: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the includeclass parameter...

CVE-2009-3307: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHPLIB parameter to 1 FSphp.php, 2 navigation.php, and 3 pathwrite.php in lib/...

CVE-2009-3323: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini BAROSmini 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the barospath parameter to 1 include/commonfunctions.php, and the mainpath parameter to 2 libusers.php, 3 libstats.php, and 4...

CVE-2009-3306: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter...

CVE-2009-3236

The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with...

Design/Logic Flaw

The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with...

CVE-2009-3236

The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with...

CVE-2009-3236

The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with...

CVE-2009-3220

PHP remote file inclusion vulnerability in cphtml2txt.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-3188

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...

CVE-2009-3188: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...

Siemens Gigaset SE361 Wlan - Remote Reboot

Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart ?php $apaddr = "192.168.2.1"; $apport="1723"; $con = fsockopen$apaddr, $apport, $errno, $errstr; if !$con echo "$errstr $errnobr /n"; else $trash =...

CVE-2009-3174

PHP remote file inclusion vulnerability in fonctionsracine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cheminlib parameter...

Siemens Gigaset SE361 Wlan Reboot Exploit

Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart \n"; else $trash = strrepeat"\x90","261"; fwrite$con, $trash; while !feof$con echo "$trash \r\n"; fclose$con; ?...

Siemens Gigaset SE361 WLAN - Remote Reboot (Denial of Service)

Siemens Gigaset SE361 WLAN - Remote Reboot Denial of Service Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart \n"; else $trash = strrepeat"\x90","261"; fwrite$con, $trash; while !feof$con echo "$tra...

CVE-2009-3174: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in fonctionsracine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cheminlib parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the evacaminho parameter to index.php...