2930 matches found
CVE-2007-0050
PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...
CVE-2007-0050
OpenPinboard 2.0 is affected by a PHP remote file inclusion in index.php, exploitable via the language parameter. The underlying issue is contested (variable set before use), with CVE notes indicating a small time window of risk during installation. Affected component: index.php of OpenPinboard 2...
CVE-2006-6838
Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...
CVE-2006-6764
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book KISGB, when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the defaultpathtothemes parameter...
CVE-2003-1314
PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook EMGB 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgbadminpath parameter...
CVE-2006-6738
PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
CVE-2006-6726
PHP remote file inclusion vulnerability in inertianewsmain.php in inertianews 0.02 beta allows remote attackers to execute arbitrary PHP code via a URL in the inewspath parameter...
CVE-2006-6720
PHP remote file inclusion vulnerability in admin/indexsitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the VIEW parameter...
CVE-2006-6710
Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...
CVE-2006-6666
PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter...
CVE-2006-6648
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtoscript parameter...
CVE-2006-6635
PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcmsrootpath parameter...
CVE-2006-6632
PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the topdir parameter...
CVE-2006-6612
PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepathstart parameter...
CVE-2006-6611
PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...
CVE-2006-6615
PHP remote file inclusion vulnerability in includes/actconstants.php in the Activity Games mxact 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...