2926 matches found
CVE-2006-3302
PHP remote file inclusion vulnerability in modcbsms.php in CBSMS Mambo Module 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosCapath parameter. NOTE: the provenance of this information is unknown; portions of the details...
CVE-2006-3172
Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash / character in the 1 langpath parameter to a cms/plugins/colman/column.inc.php, b cms/plugins/poll/poll.inc.php, c...
CVE-2006-3173
Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathcb parameter to a libraries/comment/postComment.php and b modules/poll/poll.php, 2 rel parameter to c modules/archive/overview.inc.php, and the 3...
CVE-2006-3076
PHP remote file inclusion vulnerability in softwareupload/publicincludes/pubtemplates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...
CVE-2006-3045
PHP remote file inclusion vulnerability in managesongs.php in Foing 0.7.0e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter...
Jobline 1 1 1 Version - Remote File Include Vulnerability
SaVSaK.CoM | SpC-x - TheBeKiR | Jobline 1 1 1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Jobline Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : if fileexists "$mosConfigabsolutepath/components/$option/language/$mosConfiglang.php"...
CVE-2006-2960
PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2006-2962
PHP remote file inclusion vulnerability in sqlfcnsOLD.php in Emergenices Personnel Information System Empris 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in sqlfcnsOLD.php in Emergenices Personnel Information System Empris 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter...
CVE-2006-2956
Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...
CVE-2006-2962
PHP remote file inclusion vulnerability in sqlfcnsOLD.php in Emergenices Personnel Information System Empris 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter...
Five Star Review Script - 'index2.php?sort' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a...
Remote file inclusion
PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfileroot parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in wk/wklang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WKwkPath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter in 1 index.php, 2 feedback.php, and 3 printfriendly.php...
Remote file inclusion
PHP remote file inclusion vulnerability in class.csphpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to 1 simpleuser/pages/index.inc.php and 2 stats/pages/index.inc.php...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...