EUVD-2006-3515

Malware in sbrugna...

Sabdrimer PRO <= 2.2.4 (pluginpath) Remote File Include Vulnerability

No description provided by source...

CVE-2012-1839: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXPClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pluginName or 2 pluginPath...

CVE-2008-6740: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in html/admin/modules/pluginadmin.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the settingspluginpath parameter...

CVE-2006-3520

Sabdrimer Pro 2.2.4 is affected by a PHP remote file inclusion in skins/advanced/advanced1.php when register_globals is enabled. The vulnerability allows an attacker to supply a URL via the pluginpath[0] parameter to execute arbitrary PHP code, as described in CVE-2006-3520. The NVD entry documen...

CVE-2006-3520: Undefined Security Weakness

PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pluginpath0 parameter...