4735 matches found
EUVD-2006-5772
PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...
CVE-2006-5678
PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...
CVE-2006-5673
PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...
CVE-2006-5670
PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...
EUVD-2006-5650
PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
EUVD-2006-5605
PHP remote file inclusion vulnerability in include/menubuilder.php in MiniBILL 2006-10-10 1.2.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpagedir parameter, a different vector than CVE-2006-4489...
EUVD-2006-5575
PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
php-exec.txt
Hello, This is not a new problem see http://www.securityfocus.com/bid/9302. However, we also "discovered" this a few weeks ago and contacted Apache and PHP about it. According to Stefan Esser PHP its due to Apache's failure to open file descriptors with the close on exec flag. However, according ...
EUVD-2006-5524
PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfghomepath parameter...
CVE-2006-5497
PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter...
CVE-2006-5439
The CVE-2006-5439 issue affects Comdev Misc Tools 4.1: PHP remote file inclusion in adminfoot.php when register_globals is enabled. An attacker can execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter. The NVD description confirms the vulnerability and impact (part...
CVE-2006-5401
PHP remote file inclusion vulnerability in template/barnraiser01/pnewpassword.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter...
EUVD-2006-5299
PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...
CVE-2006-5280
PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter...
EUVD-2006-5266
PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...
[SA22280] PHP "_ecalloc" Integer Overflow Vulnerability
TITLE: PHP "ecalloc" Integer Overflow Vulnerability SECUNIA ADVISORY ID: SA22280 VERIFY ADVISORY: http://secunia.com/advisories/22280/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: PHP 5.1.x http://secunia.com/product/6796/ DESCRIPTION: A vulnerability has...
CVE-2006-5141
CVE-2006-5141 is a PHP remote file inclusion vulnerability in script.php of Kevin A. Gordon Open Geo Targeting (geotarget). An attacker can supply a URL in the anp_path parameter to cause the inclusion of remote PHP code, enabling arbitrary code execution on affected servers. The NVD entry assign...
CVE-2006-5088
The connected documents confirm a PHP remote file inclusion in phpMyChat 0.1, specifically in connected_users.lib.php3, exploitable by supplying a URL in the ChatPath parameter to run arbitrary PHP code. The PT-2006-5826 entry reiterates the affected software and suggests restricting access to th...
CVE-2006-5089
PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...