CVE-2007-1155

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the body parameter to templates/ZPanelV2/template.php or 2 the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the...

CVE-2007-1131

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

CVE-2006-7068: Undefined Security Weakness

PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the clheaders parameter to 1 menu.php3 and 2 login.php3...

CVE-2006-7081: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to 1 Include/lib.inc.php3 and 2 Include/variables.php3...

CVE-2007-1155: Improper Input Validation

Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED...

CVE-2007-1123: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the body parameter to templates/ZPanelV2/template.php or 2 the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the...

CVE-2007-1133: Undefined Security Weakness

PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...

CVE-2007-1118: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtosmf parameter to 1 bridges/SMF/logout.php or 2 getsessionvars.php...

CVE-2007-1146: Undefined Security Weakness

PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter...

CVE-2007-1153: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap...

Unrestricted file upload

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool inc/lib/attachment.lib.php in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained fro...

CVE-2007-1097

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool inc/lib/attachment.lib.php in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained fro...

CVE-2007-1097

CVE-2007-1097 affects Wiclear prior to 0.11.1. The onAttachFiles function in inc/lib/attachment.lib.php allows unrestricted file uploads, enabling remote attackers to upload and execute arbitrary PHP code due to filename validation weaknesses. Impact is remote code execution with full compromise ...

CVE-2007-1104: Undefined Security Weakness

PHP remote file inclusion vulnerability in top.php in PHP Module Implementation PHP-MIP 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the laypath parameter...

CVE-2007-1097: Improper Input Validation

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool inc/lib/attachment.lib.php in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained fro...

CVE-2007-1106: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsnomoketosrules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-7045

PHP remote file inclusion vulnerability in Clan Manager Pro CMPRO 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath and possibly 2 sitepath parameters to a cmpro.ext/comment.core.inc.php and b cmpro.intern/comment.core.inc.php. NOTE: the provenanc...

CVE-2006-7048: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter to a atutor.inc.php b db-generic.inc.php c docebo.inc.php d dokeos.1.6.inc.php e dokeos.inc.php f ganesha.inc.php g...

CVE-2006-7056: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...