EUVD-2006-1386

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to 1 ImpExModule.php, 2 ImpExController.php, and 3 ImpExDisplay.php...

Remote file inclusion

PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when registerglobals is disabled, allows remote attackers to include arbitrary files via the systempath parameter...

CVE-2006-1382

PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when registerglobals is disabled, allows remote attackers to include arbitrary files via the systempath parameter...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

PT-2004-3262 · Opt X · Opt-X

Name of the Vulnerable Software and Affected Versions: Opt-X version 0.7.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the systempath parameter in the header.php file. Recommendations: For Opt-X version 0.7.2, consider restricting access to the header.php file...