3 matches found
CVE-2007-6147: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...
6.8CVSS6.4AI score0.01986EPSS
SaveExploits2References2
CVE-2006-7090: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in phpbbsecurity.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phprootpath parameter...
6.8CVSS6.4AI score0.01378EPSS
SaveExploits1References2
20