EUVD-2006-3515

Malware in sbrugna...

Sabdrimer PRO <= 2.2.4 (pluginpath) Remote File Include Vulnerability

No description provided by source...

PT-2012-3583

Name of the Vulnerable Software and Affected Versions AjaXplorer versions 3.2.x through 3.2.4 AjaXplorer versions 4.0.x through 4.0.3 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pluginName or pluginPath parameter in a "get...

CVE-2012-1839: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXPClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pluginName or 2 pluginPath...

CVE-2008-6740: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in html/admin/modules/pluginadmin.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the settingspluginpath parameter...

CVE-2006-3520

Sabdrimer Pro 2.2.4 is affected by a PHP remote file inclusion in skins/advanced/advanced1.php when register_globals is enabled. The vulnerability allows an attacker to supply a URL via the pluginpath[0] parameter to execute arbitrary PHP code, as described in CVE-2006-3520. The NVD entry documen...

CVE-2006-3520: Undefined Security Weakness

PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pluginpath0 parameter...