CVE-2008-4720: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 page/forums/bottom.php and 2 page/forums/category.php...

CVE-2008-4529

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

CVE-2008-4134: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

CVE-2008-3769

PHP remote file inclusion vulnerability in admin/createordernew.php in Freeway 1.4.1.171, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includepage parameter...

CVE-2008-3399: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...

CVE-2008-3313

Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdocumenturi parameter to administration/editionarticle/editionarticle.php and the 2 cfgbaseuriadmin parameter to administration/fonctions/getlistelangue.php...

CVE-2008-3167: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

CVE-2008-2885: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in src/browser/resource/categories/resourcecategoriesview.php in Open Digital Assets Repository System ODARS 1.0.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CLASSESROOT parameter...

Directory traversal

Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...

CVE-2008-2270

Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the 1 mainpagedirectory and 2 pagetoinclude parameters in template\index.php...

CVE-2008-2228: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...

CVE-2008-1862

ExBB Italia 0.22 and earlier are affected by PHP remote file inclusion vulnerabilities. The CVE-2008-1862 family describes checks on GET requests via QUERY_STRING that can be bypassed using POST or COOKIE variables, enabling RFI through URLs in the exbb[home_path] or new_exbb[home_path] parameter...

CVE-2008-1776

CVE-2008-1776 is a PHP remote file inclusion vulnerability in PhpBlock A8.4 where an attacker can cause arbitrary PHP code execution via a URL supplied to PATH_TO_CODE in modules/basicfog/basicfogfactory.class.php. Multiple sources (NVD entries and related records) confirm the vulnerable file and...

CVE-2008-1682: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2008-0743

PHP remote file inclusion vulnerability in membershelp.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter...

CVE-2008-0572

Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MMGLOBALShome parameter to 1 acweb/adminindex.php; and 2 ask.inc.php, 3 learn.inc.php, 4 manage.inc.php, 5 mind.inc.php, and 6 sensory.inc.php in include/...

CVE-2008-0442: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-0137: Improper Neutralization of Special Elements used in an SQL Command

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

CVE-2007-6555: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/modpxtlatest.php in the mosDirectory comdirectory 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...