Remote file inclusion

PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGDATAREADERWRITER parameter, a different vector than CVE-2001-1297. NOTE: the provenance of this information is unknown; the...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1.1, allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGPOLLDB parameter to actionpoll.php or 2 the CONFIGDB parameter to db/DataReaderWriter.php, different vectors...

CVE-2007-2064

CVE-2007-2064 describes multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0 (and possibly 1.1.1). The flaws allow an attacker to execute arbitrary PHP code by supplying a URL in the CONFIG_POLLDB parameter to actionpoll.php or in the CONFIG_DB parameter to db...