CVE-2007-4818: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4738

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library STPHPLibrary 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbconf or 2 ADODBDIR parameter to utils/stphpimageshow.php; or a URL in the STPHPLIBDIR parameter to 3 stphpbutton.php, 4...

CVE-2007-4712: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

PHPOF 20040226 - DB_adodb.class.php Remote File Inclusion

PHPOF 20040226 - DBadodb.class.php Remote File Inclusion Phpof Remote file inclusion Download script : http://www.phpof.org/phpof-20040226.tar.bz2 Thx Str0ke Exploit : http://victime.com/phpofpath/dbmodules/DBadodb.class.php?PHPOFINCLUDEPATH=shell.txt? Discoverd by ThE TiGeR...

CVE-2007-4551: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4331

PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting XSS attacks via a URL in the page parameter...

CVE-2007-4326: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 gruppen.php, 2 bild.php, 3 feed.php, 4 mitglieder.php, 5 online.php, 6 profil.php, and possibly other unspecified PHP...

CVE-2007-4117: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the PNPathPrefix parameter. NOTE: this issue is disputed by a reliable third party, who demonstrates that PNPathPrefix is defined before use...

B1GBB Footer.Inc.PHP远程文件包含漏洞

B1GBB是一款基于PHP的WEB应用程序。 B1GBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Footer.Inc.PHP'脚本对用户提交的'tfooter'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 b1gBB 2.24 目前没有详细解决方案提供： http://board.b1g.de/forumdisplay.php?f=13 http://www.example.com/path/footer.inc.php?tfooter=shell?...

CVE-2007-3315

Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter to bodyTemplate.php in 1 templates/Classic/, 2 templates/Classic Guestbook/, 3...

CVE-2007-3325: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/language.php in LAN Management System LMS 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205...

CVE-2007-3228: Undefined Security Weakness

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUMLIB parameter. NOTE: by default, access to the PhpDocumentor directory tree...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbpath parameter to a useronline.php, b ucp.php, c setcookie.php, d sendpm.php, e search.php, f register.php, g profile.php, h post.php, i pmpshow.php, j pm.php, k...

CVE-2007-2774: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...

CVE-2007-2609

Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the a ETCDIR parameter to 1 libs/lom.php; 2 lomupdate.php, 3 check-lom.php, and 4 weighkeywords.php in scripts/; the b LIBSDIR parameter to 5 logout.php, 6 help.php...

CVE-2007-2620: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner aka jimmac original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x1 parameter...

CVE-2007-2615: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the pathlocal parameter to 1 ftp.php, 2 libs/db.php, and 3 libs/ftp.php...

CVE-2007-2545: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the systempath parameter to 1 blocks/headerfile.php, 2 files/blocks/latestfiles.php, 3 filters/headerfile.php, 4 forums/blocks/latestposts.php, 5...