CVE-2007-1935

CVE-2007-1935 affects ScarAdControl (ScarAdController) 1.1, where admin/index.php uses the site parameter and calls file_exists, enabling a remote attacker to execute arbitrary PHP code via UNC share or local file path. This is a PHP file inclusion vulnerability; the impact is described as arbitr...

CVE-2007-1936

CVE-2007-1936 affects ScarAdControl (ScarAdController) 1.1. The vulnerability is a PHP remote file inclusion in scaradcontrol.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the sac_config_dir parameter. Root cause is likely a vulnerable file inclusion using user-s...