74 matches found
EUVD-2008-3756
Malware in sbrugna...
EUVD-2010-1965
Malware in sbrugna...
EUVD-2012-1942
Malware in sbrugna...
EUVD-2008-2071
Malware in sbrugna...
EUVD-2006-4066
Malware in sbrugna...
CVE-2010-1921
Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 annuaire.class.php, 2 droit.class.php, 3 collectivite.class.php, 4 profil.class.php, 5...
CVE-2008-3763
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...
CVE-2008-3574
Multiple cross-site scripting XSS vulnerabilities in Pluck 4.5.2, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 langfooter parameter to a data/inc/footer.php; the 2 pluckversion, 3 langinstall22, 4 titelkop, 5 langkop1, 6 langkop2, 7...
EUVD-2008-1903
PHP remote file inclusion vulnerability in newsshow.php in Newanz NewsOffice 1.0 and 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsofficedirectory parameter...
EUVD-2006-5417
Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when registerglobals is enabled, allow remote attackers to create or overwrite arbitrary files via the 1 emailto, 2 emailfrom, 3 nameto, 4 namefrom, 5 picture, 6 comment, or 7 sessionID parameter, as...
EUVD-2006-5384
PHP remote file inclusion vulnerability in classes/ImportMM.class.php in PHPRecipeBook 2.36, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the grbbasedir parameter...
EUVD-2006-5205
Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the webyepsIncludePath in 1 files in the programm/lib/ directory including a WYApplication.php, b WYDocument.php, c WYEditor.php, d...
Remote file inclusion
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter in 1 index.php, 2 feedback.php, and 3 printfriendly.php...