4733 matches found
EUVD-2006-2485
PHP remote file inclusion vulnerability in includes/classtemplate.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezzarootpath parameter...
EUVD-2006-2425
PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManagerPath parameter to ezusermanagerpwdforgott.php, possibly due to an issue in ezusermanagercore.inc.php...
90% of programs made in PHP5 and prior Full Path Disclosure vuln.
:Introduction: Normally one of the last steps when accessing to a web-server is to find the url where the web is installed more common in RFD. This may be a hard step, if the RPD is the only bug in that server, but PHP programs have functions that unexpectedly can return lots of errors. ATTENTION...
Remote file inclusion
PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
EUVD-2006-2254
PHP remote file inclusion vulnerability in visiblecountinc.php in Statit 4 060207 allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter...
CVE-2006-1994
PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUMPATH parameter to 1 about.php, 2 admin.php, 3 anmelden.php, 4 losethread.php, 5 config.php, 6 delpost.php, 7 delthread.php, 8 dfcode.php, 9 download.php, ...
Remote file inclusion
PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUMPATH parameter to 1 about.php, 2 admin.php, 3 anmelden.php, 4 losethread.php, 5 config.php, 6 delpost.php, 7 delthread.php, 8 dfcode.php, 9 download.php, ...
EUVD-2006-2009
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...
CVE-2006-1959
CVE-2006-1959 describes a PHP remote file inclusion in direct.php of ActualScripts products: ActualAnalyzer Lite <=2.72, Gold <=7.63, and Server
EUVD-2006-1919
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-1702
PHP remote file inclusion vulnerability in spiplogin.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...
DEBIAN-CVE-2006-1702
PHP remote file inclusion vulnerability in spiplogin.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...
Code injection
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."...
Mandrake Linux Security Advisory : php (MDKSA-2006:063)
A vulnerability was discovered where the htmlentitydecode function would return a chunk of memory with length equal to the string supplied, which could include php code, php ini data, other user data, etc. Note that by default, Corporate 3.0 and Mandriva Linux LE2005 ship with magicquotesgpc on...
Design/Logic Flaw
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" paramet...
CVE-2006-1208
CVE-2006-1208 affects the Sergey Korostel PHP Upload Center. The vulnerability allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory. The underlying cause is improper handling of uploaded f...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter...
