2934 matches found
CVE-2009-0444
GRBoard 1.8 is vulnerable to multiple PHP remote file inclusion attacks when register_globals is on and magic_quotes_gpc is off. The flaw allows an attacker-controlled URL parameter (theme) to cause arbitrary PHP code execution via various theme-related scripts (e.g., 179_squarebox_*/view.php) an...
CVE-2009-0441
PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...
CVE-2008-6066
CVE-2008-6066 concerns multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the root_path parameter to six files in the classes/ directory (modules.php, ManagerResource.class.php, ManagerRightsR...
CVE-2009-0430
Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamelarootpath parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...
Remote file inclusion
PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...
Unfixed Frame Redirect vulnerability at www.merkleinc.com
Security researcher skathgh420, has submitted on 01/05/2009 a Frame Redirect vulnerability affecting www.merkleinc.com, which at the time of submission ranked 421128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator comfeederator component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 mosConfigabsolutepath parameter to a addtmsp.php, b edittmsp.php and c tmsp.php in includes/tmsp...
Remote file inclusion
PHP remote file inclusion vulnerability in sloginlib.inc.php in Simple Text-File Login Script SiTeFiLo 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sloginpath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the incfunction parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
CVE-2008-5332
Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...
Remote file inclusion
PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox aka IdeBox 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in upload/admin/frontpageright.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter...
CVE-2008-5060
Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to 1 exportbatch.inc.php, 2 runautosuspend.cron.php, and 3 sendemailcache.php in include/scripts/; 4...
CVE-2008-5053
PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader comrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...