CVE-2007-2628

PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP aka PHPSecurityAdmin, PSA 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSAPATH parameter...

CVE-2007-2628

CVE-2007-2628 affects Justin Koivisto’s SecurityAdmin for PHP (PHPSecurityAdmin) v4.0.2. The vulnerability is a PHP remote file inclusion in include/logout.php that allows an attacker to execute arbitrary PHP code by supplying a URL via the PSA_PATH parameter. Documented impact is arbitrary code ...

CVE-2007-2620

PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner aka jimmac original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x1 parameter...

CVE-2007-2608

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSCHEMINMODULES parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CommonAbsDir parameter...

CVE-2007-2611

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to 1 mtdialogo.php, 2 ltdialogo.php, 3 login.php, and 4 logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/...

Remote file inclusion

PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrary PHP code via a URL in the sousrep parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...

CVE-2007-2573

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/noevents/templates/mfatheme.php in NoAh aka PHP Content Architect, phparch 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls1 parameter...

CVE-2007-2545

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the systempath parameter to 1 blocks/headerfile.php, 2 files/blocks/latestfiles.php, 3 filters/headerfile.php, 4 forums/blocks/latestposts.php, 5...

CVE-2007-2542

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to 1 dplogs.php or 2 index.php...

Remote file inclusion

PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2007-2493

PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2007-2481

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...