CVE-2005-0075

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

SquirrelMail < 1.4.4 Multiple Vulnerabilities

The target is running at least one instance of SquirrelMail whose version number suggests it is affected by one or more cross-site scripting vulnerabilities : - Insufficient escaping of integer variables in webmail.php allows a remote attacker to include HTML / script into a SquirrelMail webpage...

CVE-2004-2623

Unknown vulnerability in Rippy the Aggregator before 0.10, when registerglobals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."...

CVE-2004-2453

Unknown vulnerability in Tutti Nova 0.10 through 0.12 Beta and 0.9.4, when registerglobals is enabled, has unknown impact and attack vectors...

CVE-2002-1430

CVE-2002-1430 : Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters. Exploitation details are not provided in the connected documents; the description indicates a ...

CVE-2002-1430

Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when registerglobals is enabled, possibly by modifying certain PHP variables through URL parameters...

CVE-2001-1370

CVE-2001-1370 affects PHPLib before 7.2d when register_globals is on, allowing remote code execution by sending an HTTP request that overwrites $_PHPLIB[libdir] to load code from another server. The issue is observed in Horde 1.2.5 and earlier, and in IMP before 2.2.6. Debian’s DSA-073-1 referenc...

CVE-2002-1704

Zeroboard 4.1, when the "allowurlfopen" and "registerglobals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the zbpath parameter to reference a URL on a remote web server that contains the code...

Achievo class.atkdateattribute.js.php config_atkroot Parameter Remote File Inclusion

The remote host is running Achievo, a web-based resource management tool written in PHP. The version of Achievo on the remote host includes a PHP script which is reported to be affected by a remote file include vulnerability. An attacker may use this flaw to inject arbitrary code in the remote ho...