9879 matches found
CVE-2007-1771: Undefined Security Weakness
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ================================================================...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date...
Advanced Login 0.7 - root Remote File Inclusion
Advanced Login 0.7 - root Remote File Inclusion ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date Found : Maret, 29th 2007 Location :...
CVE-2007-1721: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 Richtxtfunctions.inc.php, 2 adddocfile.php, 3 authcheck.php, 4 browsecurrentcategory.inc.php, 5 docfiledetails.php, 6...
CVE-2007-1695
PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...
CVE-2007-1708: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2007-1699: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in the SWmenu comswmenupro and comswmenufree 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to ImageManager/Classes/ImageManager.php under the 1 components...
CVE-2007-1695: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...
CVE-2007-1702: Undefined Security Weakness
PHP remote file inclusion vulnerability in modflatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2007-1697: Undefined Security Weakness
PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...
CVE-2007-1715: Undefined Security Weakness
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
CVE-2007-1643: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...
Unrestricted file upload
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...
CVE-2007-1639
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...
CVE-2007-1639
PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...
CVE-2007-1639
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...
Code injection
Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php...
CVE-2007-1636
CVE-2007-1636 affects RoseOnlineCMS 3 B1 and is described as a directory traversal vulnerability in index.php. The vulnerability allows remote attackers to include arbitrary files by using a .. sequence in the op parameter, with demonstrated impact involving injection of PHP code into Apache log ...