EUVD-2007-1929

Malware in sbrugna...

EUVD-2007-1930

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sacconfigdir parameter...

CVE-2007-1935

PHP file inclusion vulnerability in admin/index.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the fileexists function...

CVE-2007-1935

PHP file inclusion vulnerability in admin/index.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the fileexists function...

CVE-2007-1936

PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sacconfigdir parameter...

CVE-2007-1936

CVE-2007-1936 affects ScarAdControl (ScarAdController) 1.1. The vulnerability is a PHP remote file inclusion in scaradcontrol.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the sac_config_dir parameter. Root cause is likely a vulnerable file inclusion using user-s...

CVE-2007-1935

CVE-2007-1935 affects ScarAdControl (ScarAdController) 1.1, where admin/index.php uses the site parameter and calls file_exists, enabling a remote attacker to execute arbitrary PHP code via UNC share or local file path. This is a PHP file inclusion vulnerability; the impact is described as arbitr...