CVE-2009-1248

CVE-2009-1248 affects Acute Control Panel 1.0.0, with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to craft a URL in the theme_directory parameter to container.php or header.php within themes/ to execute arbitrary PHP code on the server. The underlying root cau...

CentOS Update for php CESA-2008:0546-01 centos2 i386

Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2008:0546-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

PHP < 5.2.8 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is earlier than 5.2.8. As such, it is potentially affected by the following vulnerabilities : - PHP fails to properly sanitize error messages of arbitrary HTML or script code, would code allow for cross-site scripting attack...

CVE-2008-5332

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

GLSA-200811-05 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200811-05 PHP: Multiple vulnerabilities Several vulnerabilitites were found in PHP: PHP ships a vulnerable version of the PCRE library which allows for the circumvention of security restrictions or even for remote code execution i...

nicLOR Sito - includefile Local File Inclusion

------------------------------------------------------------ Sito includefile in PHP Local File Inclusion Vulnerabilities ------------------------------------------------------------ Discovered By StAkeRathotmaildotit Download On http://www.niclor.net/prodotti/includeSitoPHP/includeSitoPHP.zip...

PHP < 4.4.9 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 4.4.9. Such versions may be affected by several security issues : - There are unspecified issues in the bundled PCRE library fixed by version 7.7. - A buffer overflow in the 'imageloadfont' function in...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : php5 vulnerabilities (USN-628-1)

It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function. An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function. CVE-2007-4782 Maksymilian Arciemowicz discovered a flaw in t...

Debian Security Advisory DSA 1578-1 (php4)

The remote host is missing an update to php4 announced via advisory DSA 1578-1. OpenVAS Vulnerability Test $Id: deb15781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1578-1 php4 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1578-1 php4 - several vulnerabilities

Bulletin has no description...

CVE-2008-2220

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGLANGUAGECPATH parameter to modules/forum/embedforum.php and the 2...

PHP 5.x < 5.2.6 Multiple Vulnerabilities

Binary data 4493.prm...

CVE-2008-1511

Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for 1 classes/classadmin.php and 2 classes/classcomments.php. NOTE: the provenance of this information is unknown; the details are...

PHP 5.x < 5.2.0 Multiple Vulnerabilities

Binary data 4444.prm...

Debian: Security Advisory (DSA-1444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1444-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 1444-1. OpenVAS Vulnerability Test $Id: deb14441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1444-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

PHP < 4.4.8 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 4.4.8. Such versions may be affected by several issues, including integer overflows involving the 'chunksplit', 'strcspn', and 'strspn' functions, and 'safemode' / 'openbasedir' bypasses. %NASLMINLEVEL 70300 C...

EUVD-2007-6074

Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagefile parameter to a comments-display-tpl.php and b addons/separate-comments-mod/my-comments-display-tpl.php and the 2 configcommentsformtpl paramete...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass commp3allopass 1.0 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter to 1 allopass.php and 2 allopass-error.php...

CVE-2007-5216

Multiple PHP remote file inclusion vulnerabilities in eArk e-Ark 1.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the cfgvcardpath parameter to src/vcardinc.php or 2 the cfgphpmailerpath parameter to src/emailinc.php. NOTE: the arkinc.php vector is already covered by...