9964 matches found
CommunityPortals 1.0 - 'bug.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20466/info CommunityPortals is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process...
CVE-2006-5223
PHP remote file inclusion vulnerability in includes/functionsuserviewedposts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5181
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in 1 changepreferences2.php, 2 createfile.php, 3 uploadlocal.php, and 4 uploadmulti.php, different vectors than CVE-2006-5124...
vtiger CRM <= 4.2 (calpath) Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================== vtiger CRM = 4.2 calpath Multiple Remote File Include Vulnerabilities ======================================================================== \ /\ \ / | \ \ | / \ //...
CVE-2006-5222: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...
CVE-2006-5226: Undefined Security Weakness
PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...
CVE-2006-5223: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/functionsuserviewedposts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5224: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/loggerengine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
vTiger CRM 4.2 - calpath Multiple Remote File Inclusions
vTiger CRM 4.2 - calpath Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV54$2006 ----------------------------------------------------------------------------------------------- ECHOADV54$2006vtiger CRM =4.2 calpath Multiple...
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== OpenDock Easy Blog =1.4 docdirectory File Include Vulnerabilities ===================================================================== ECHOADV50$2006...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Gallery 1.4 - doc_directory File Inclusion
OpenDock Easy Gallery 1.4 - docdirectory File Inclusion ECHOADV52$2006 ----------------------------------------------------------------------------------------------- ECHOADV52$2006OpenDock Easy Gallery =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== OpenDock Easy Doc =1.4 docdirectory File Include Vulnerabilities ==================================================================== ECHOADV49$2006...
WebYep 1.1.9 - webyep_sIncludePath File Inclusion
WebYep 1.1.9 - webyepsIncludePath File Inclusion ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...
OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities
No description provided by source. ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
CVE-2006-5207: Undefined Security Weakness
PHP remote file inclusion vulnerability in images/smileys/smileyspacks.php in phpMyTeam 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileysdir parameter...
CVE-2006-5220: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the webyepsIncludePath in 1 files in the programm/lib/ directory including a WYApplication.php, b WYDocument.php, c WYEditor.php, d...
CVE-2006-5203: Undefined Security Weakness
Invision Power Board IPB 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...
WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
No description provided by source. ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...