CVE-2007-0232

PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter...

CVE-2007-0190

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter to 1 adminpassword.php, 2 addwelcometext.php, 3 adminemail.php, 4 addtemplates.php, 5 adminpaypalemail.php, 6...

Remote file inclusion

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

CVE-2007-0182

Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter to 1 adminpassword.php, 2 addwelcometext.php, 3 adminemail.php, 4 addtemplates.php, 5 adminpaypalemail.php, 6...

Remote file inclusion

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...

CVE-2007-0181

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

CVE-2007-0181

The CVE-2007-0181 entry describes a PHP remote file inclusion in the magic photo storage website, triggered through the _config[site_path] parameter in include/common_function.php. The underlying issue is insufficient validation of a URL-like value, allowing an attacker to cause arbitrary PHP cod...

CVE-2007-0181

PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...

CVE-2007-0190

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the AMVserverpath parameter...

CVE-2007-0167

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...

EUVD-2007-0171

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...

CVE-2007-0143

Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the customadminpath parameter to 1 index.php or 2 archives.php...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the currentpath parameter...

CVE-2007-0050

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

CVE-2007-0050

OpenPinboard 2.0 is affected by a PHP remote file inclusion in index.php, exploitable via the language parameter. The underlying issue is contested (variable set before use), with CVE notes indicating a small time window of risk during installation. Affected component: index.php of OpenPinboard 2...

CVE-2006-6838

Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...