CVE-2010-1945

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 action.class.php, 2 architecte.class.php, 3 avis.class.php, 4 bible.class.php, and 5...

CVE-2010-1934

Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 categorie.class.php, 2 profil.class.php, 3 collectivite.class.php, 4 ressource.class.php...

CVE-2010-1935

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1921

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 annuaire.class.php, 2 droit.class.php, 3 collectivite.class.php, 4 profil.class.php, 5...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 categorie.class.php, 2 profil.class.php, 3 collectivite.class.php, 4 ressource.class.php...

CVE-2010-1936

This CVE covers a directory traversal (LFI) vulnerability in OpenMairie OpenComInterne (and related OpenMairie components) where, when register_globals is enabled, an attacker can craft dsn[phptype] queries to include and execute local files. The issue appears in OpenMairie OpenComInterne 1.01 an...

CVE-2010-1926

The CVE-2010-1926 entry applies to openMairie openCourrier 2.02 and 2.03 beta. It describes a directory traversal vulnerability in scr/soustab.php that, with register_globals enabled, allows remote attackers to include and execute arbitrary local files via traversal sequences in the dsn[phptype] ...

CVE-2010-1927

Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 bible.class.php, 2 dossier.class.php, 3 service.class.php, 4...

CVE-2010-1927

Affected software : openMairie openCourrier (versions 2.02 and 2.03 beta). Vulnerability : multiple PHP remote file inclusion (RFI) vulnerabilities. The root cause is exposure of path_om usage when register_globals is enabled, allowing an attacker to influence file inclusion paths and execute arb...

CVE-2010-1935

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1711

Cross-site scripting XSS vulnerability in cargafotoal.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter...

CVE-2010-1710

Directory traversal vulnerability in login.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the idioma parameter...

Directory traversal

Directory traversal vulnerability in login.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the idioma parameter...

CVE-2010-1710

CVE-2010-1710 affects Siestta 2.0 and earlier. A directory traversal vulnerability exists in login.php when register_globals is enabled, allowing remote attackers to include and execute arbitrary local files by manipulating the idioma parameter with a .. sequence. The NVD CVSS base score is 6.8 (...

CVE-2010-1528

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

CVE-2010-1528

CVE-2010-1528 corresponds to a PHP remote file inclusion vulnerability in include/template.php of Uiga Proxy. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the content parameter. This vulnerability is described consistently across multi...

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn...

CVE-2010-1351

Nodesforum versions 1.033 and 1.045 are affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. An attacker can trigger code execution via a URL parameter to erase_user_data.php (_nodesforum_path_from_here_to_nodesforum_folder) or to pre_output.php (_nodes...