CVE-2007-1299

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

CVE-2006-7124

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter...

MOPB-13-2007:PHP 4 Ovrimos Extension Multiple Vulnerabilities

Summary The Ovrimos extension is an external contributed extension for the Ovrimos SQL Server, which is a client/server, transactional RDBMS combined with Web capabilities and fast transactions. While looking at the code it was discovered that does not use resources to keep track of connections a...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

CVE-2007-1148

PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter...

CVE-2007-1146

PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpscriptpath parameter. NOTE: This issue may overlap CVE-2006-0723...

CVE-2007-1133

PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...

CVE-2006-7044

PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro CMPRO 1.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2006-7048

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter to a atutor.inc.php b db-generic.inc.php c docebo.inc.php d dokeos.1.6.inc.php e dokeos.inc.php f ganesha.inc.php g...

security flaw

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

DEBIAN-CVE-2007-1054

Cross-site scripting XSS vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer...

Remote file inclusion

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...

CVE-2007-1025

CVE-2007-1025 is a PHP remote file inclusion vulnerability in the file set of VS-Link-Partner 2.1 and earlier . The issue is in inc/functions_inc.php and allows an attacker to supply a URL via the gb_pfad (or possibly script_pfad ) parameter to execute arbitrary PHP code on the affected system. T...

security flaw

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

CVE-2007-0910

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

EUVD-2007-0905

Off-by-one error in the strireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service crash...

CVE-2007-0881

CVE-2007-0881 describes a PHP remote file inclusion in OPENi-CMS 1.0 via the Seitenschutz plugin. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted URL in open-admin/plugins/site_protection/index.php, using the config[oi_dir] parameter (and possibly config[...

CVE-2007-0863

Trevorchan 0.7 and earlier is affected by a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary code by manipulating tc_config[rootdir] via multiple API endpoints (upgrade.php, paint_save.php, menu.php, manage.php, banned.php). The core cause is user-control...