CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/class/classtpl.php in Firesoft allows remote attackers to execute arbitrary PHP code via a URL in the cachefile parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the dvdconfigfile parameter...

Cross site scripting

PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting XSS attacks via a URL in the page parameter...

CVE-2007-4330

PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

PT-2007-5364 · Php · Vgallite

Name of the Vulnerable Software and Affected Versions: vgallite affected versions not specified Description: Multiple PHP remote file inclusion issues in vgallite may allow remote attackers to execute arbitrary PHP code. The issue is reportedly related to the dirpath parameter to functions.php an...

CVE-2007-4118

PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Article Directory Article Site Directory allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2007-4009

PHP remote file inclusion vulnerability in admin/businessinc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter...

PHP 5.2.3 tidy extension local overflow vulnerability-vulnerability warning-the black bar safety net

? php if ! extensionloaded"tidy"die"you need Tidy extension loaded!"; $scode = "\xfc\xbb\xc7\xc4\x05\xc9\xeb\x0c\x5e\x56\x31\x1e\xad\x01\xc3\x85". "\xc0\x75\xf7\xc3\xe8\xef\xff\xff\xff\x3b\x2c\x41\xc9\xc3\xad\xc1". "\x8c\xff\x26\xa9\x0b\x87\x39\xbd\x9f\x38\x22\xca\xff\xe6\x53\x27"...

EUVD-2007-3681

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbbrootpath parameter...

CVE-2007-3585

PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

eticket-xss.txt

netVigilance Security Advisory 31 eTicket version 1.5.5 XSS Attack Vulnerability Description: eTicket is an electronic open source support ticket system based on osTicket, that can receive tickets via email pop3 or pipe and a web-based form, as well as manage them using a web interface. Successfu...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the siteurl parameter...

CVE-2007-2743

PHP remote file inclusion vulnerability in customvars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the syspathaddon parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in customvars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the syspathaddon parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter...

CVE-2007-2624

Dynamic variable evaluation vulnerability in shared/config/cpconfig.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to conduct cross-site scripting XSS and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third par...

EUVD-2007-2587

PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSCHEMINMODULES parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...