EUVD-2007-5147

Malware in sbrugna...

CVE-2007-5166

Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 inc/pagehead.inc.php or 2 inc/pageinit.inc.php...

CVE-2007-5166

Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 inc/pagehead.inc.php or 2 inc/pageinit.inc.php...

CVE-2007-5166

CVE-2007-5166 affects SiteSys 1.0a with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL to the doc_root parameter for inc/pagehead.inc.php or inc/pageinit.inc.php. Root cause: unsanitized doc_root parameter ...