Lucene search
+L

4733 matches found

RedHat Linux
RedHat Linux
added 2006/07/12 6:06 p.m.16 views

security flaw

zendhashdelkeyorindex in zendhash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zendhashdel to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations...

9.3CVSS5.7AI score0.04136EPSS
SaveExploits0References4
NVD
NVD
added 2006/07/07 12:05 a.m.27 views

CVE-2006-3421

PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in 1 comment.php, 2 admin/comedit.php, 3 admin/test.php, 4 admin/index.php, and 5 admin/include/incadminfoot.php, ...

5.1CVSS7.5AI score0.04234EPSS
SaveExploits3References9
CVE
CVE
added 2006/07/07 12:00 a.m.60 views

CVE-2006-3422

CVE-2006-3422 describes a PHP remote file inclusion vulnerability in WonderEdit Pro CMS . An attacker can trigger arbitrary PHP code execution by supplying a crafted value to the config[template_path] parameter in user_bottom.php , affecting multiple templates (rwb, gwb, blues, bluwhi, grns). The...

7.5CVSS8AI score0.02537EPSS
SaveExploits2References3Affected Software1
exploitpack
exploitpack
added 2006/06/29 12:00 a.m.16 views

GeekLog 1.4.0sr3 - f(u)ckeditor Remote Code Execution

GeekLog 1.4.0sr3 - fuckeditor Remote Code Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n";...

0.4AI score
SaveExploits0
EUVD
EUVD
added 2006/06/23 12:00 a.m.8 views

EUVD-2006-3174

PHP remote file inclusion vulnerability in Admin/rtfparser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter...

7.5CVSS7.6AI score0.03454EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2006/06/23 12:00 a.m.29 views

CVE-2006-3177

PHP remote file inclusion vulnerability in Admin/rtfparser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter...

7.6AI score0.03454EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2006/06/22 10:00 p.m.30 views

CVE-2006-3162

PHP remote file inclusion vulnerability in include/incfoot.php in SmartSiteCMS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

7.5AI score0.07067EPSS
SaveExploits2References5
NVD
NVD
added 2006/06/19 10:02 a.m.26 views

CVE-2006-3076

PHP remote file inclusion vulnerability in softwareupload/publicincludes/pubtemplates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...

6.4CVSS7.3AI score0.0257EPSS
SaveExploits2References4
NVD
NVD
added 2006/06/07 12:02 a.m.23 views

CVE-2006-2877

PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the includeprefix parameter in 1 inc/dbase.php, 2 inc/config.php, 3 inc/common.php, and 4 inc/function.php. NOTE: it has been reported that the inc directory is...

7.5CVSS6.9AI score0.07605EPSS
SaveExploits4References11
Prion
Prion
added 2006/06/06 8:06 p.m.25 views

Remote file inclusion

DISPUTED PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been...

7.5CVSS7.3AI score0.47196EPSS
SaveExploits3References20Affected Software1
Prion
Prion
added 2006/06/06 8:06 p.m.18 views

Remote file inclusion

PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter in 1 index.php, 2 feedback.php, and 3 printfriendly.php...

6.8CVSS8.1AI score0.11082EPSS
SaveExploits2References11Affected Software1
EUVD
EUVD
added 2006/06/06 8:03 p.m.12 views

EUVD-2006-2840

PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...

7.5CVSS7.5AI score0.03836EPSS
SaveExploits1References8
EUVD
EUVD
added 2006/06/06 8:03 p.m.12 views

EUVD-2006-2842

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...

7.5CVSS7.5AI score0.03836EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2006/06/06 8:03 p.m.36 views

CVE-2006-2860

PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 inc/logincheck.inc.php, 2 inc/adminheader.inc.php, 3 inc/global.php, or 4 inc/mainheader.inc.php. NOTE: some of these vectors were also...

7.5AI score0.13028EPSS
SaveExploits2References12
Prion
Prion
added 2006/06/02 10:18 a.m.12 views

Remote file inclusion

PHP remote file inclusion vulnerability in Ottoman 1.1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the defaultpath parameter in 1 error.php, 2 index.php, and 3 classes/mainclass.php...

5.1CVSS8.2AI score0.03381EPSS
SaveExploits2References8Affected Software1
UbuntuCve
UbuntuCve
added 2006/06/02 1:02 a.m.26 views

CVE-2006-2762

PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a userinc setting that is used in an...

6.4CVSS6.3AI score0.02169EPSS
SaveExploits0References1
CVE
CVE
added 2006/06/01 10:00 a.m.57 views

CVE-2006-2744

CVE-2006-2744 affects F@cile Interactive Web versions 0.8.41–0.8.5. The vulnerability is a PHP remote file inclusion via the l parameter in p-popupgallery.php, allowing remote code execution. Affected component is the PHP code path handling URL input; exploitation would grant an attacker remote P...

7.5CVSS7.5AI score0.09861EPSS
SaveExploits2References9Affected Software1
Prion
Prion
added 2006/05/30 9:02 p.m.24 views

Remote file inclusion

PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...

7.5CVSS8AI score0.08755EPSS
SaveExploits2References6Affected Software1
CVE
CVE
added 2006/05/24 11:00 p.m.657 views

CVE-2006-2568

UBB.threads vulnerability CVE-2006-2568 is a remote file inclusion in addpost_newpoll.php, where the thispath parameter is consumed by PHP include() without proper sanitization. Affected versions are UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial). Exploitation can enable an attacker to view ar...

5.1CVSS7.6AI score0.07873EPSS
SaveExploits2References7Affected Software1
Packet Storm
Packet Storm
added 2006/05/22 12:00 a.m.29 views

sugarsuite.txt

!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.sugarcrm.com/crm/ i vulnerable code in modules/OptimisticLock/LockResolve.php...

7.4AI score
SaveExploits0
Rows per page
Query Builder