BigACE 1.8.2 upload_form.php GLOBALS Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute i...

CVE-2008-5220

The CVE-2008-5220 issue affects wPortfolio 0.3 and earlier . It is an unrestricted file upload vulnerability in admin/upload_form.php that allows remote attackers to achieve arbitrary code execution by uploading a file with an executable extension and then requesting it directly from admin/tmp/ ....

CVE-2008-5220: Improper Input Validation

Unrestricted file upload vulnerability in admin/uploadform.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/...

CVE-2006-4423: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSBIGACEDIRadmin parameter in a system/command/admin.cmd.php, b admin/include/uploadform.php, and c admin/include/itemmain.php; and the 2...