CVE-2007-6657

PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...

CVE-2007-6655

PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

Kontakt Formular 1.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Kontakt Formular 1.4 Remote File Inclusion Vulnerability ======================================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + +...

PT-2007-6257 · Universibo · Universibo

Name of the Vulnerable Software and Affected Versions: UniversiBO version 1.3.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter in the htmls/forum/includes/topic review.php file. This is due to a remote file inclusion...

PT-2007-4474 · Mybloggie · Mybloggie

Name of the Vulnerable Software and Affected Versions: myBloggie version 2.1.5 Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the bloggie root path parameter to several PHP files, including config.php, db.php, template.php, functions.php,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...

MXBB MX Smartor Module PHPBB_Root_Path远程文件包含漏洞

mxBB Smartor Album module是一款基于PHP的WEB应用程序。 mxBB Smartor Album module不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'adminalbumotf.php'脚本对用户提交的'PHPBBRootPath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 mxBB Smartor Album module 2.0 RC1 目前没有解决方案提供： http://www.mx-system.com/...

CVE-2007-1987

Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...

PT-2007-3332 · Phpecho · Phpecho Cms

Name of the Vulnerable Software and Affected Versions: PHPEcho CMS version 2.0 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the plugin file parameter to "smarty/internals/core.load pulgins.php" or the root path parameter t...

PT-2007-3321 · Xoops +1 · Virii Info +1

Name of the Vulnerable Software and Affected Versions: Xoops module Virii Info versions 1.10 and earlier Description: A remote file inclusion issue in the index.php file of the Virii Info module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfigroot path...

CARE2X 1.1 - ROOT_PATH Remote File Inclusion

CARE2X 1.1 - ROOTPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability...

CARE2X 1.1 - 'ROOT_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability --------------------------...

PT-2007-1424 · Leicestershire · Leicestershire Communityportals

Name of the Vulnerable Software and Affected Versions: Leicestershire communityPortals versions 1.0 build 20051018 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the cp root path parameter. This is a different vector than previously identifie...

CVE-2006-6295

PHP remote file inclusion vulnerability in includes/mxcommon.php in the mxtinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6281

PHP remote file inclusion vulnerability in checkstatus.php in dicshunary 0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the dicshunaryrootpath parameter...

mxBB Module calsnails 1.06 (mx_common.php) File Include Vulnerability

No description provided by source. mxBB calsnails module 1.06 Remote File Inclusion Vulnerability Bugfounder: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Gr33tings: nukedx, DeeJay, TheJT, str0ke Mod-Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=21...

PT-2006-6318 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to the version that fixes the issue in Fully Modded phpBB phpbbfm 2021.4.40 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. This is a result of a PH...

PT-2006-6154 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions 2.0.10 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code. This is achieved by providing a URL in the phpbb root path parameter. Recommendations: For versions 2.0.10 and earlie...

phpBB RPG Events 1.0 functions_rpg_events Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...

phpBB lat2cyr Mod 1.0.1 (lat2cyr.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBB lat2cyr 1.0.1 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...