CVE-2007-6105

Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagefile parameter to a comments-display-tpl.php and b addons/separate-comments-mod/my-comments-display-tpl.php and the 2 configcommentsformtpl paramete...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2004-2757

Cross-site scripting XSS vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship FCS allows remote attackers to inject arbitrary web script or HTML via url parameter...

CVE-2004-2757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship FCS allows remote attackers to inject arbitrary web script or HTML via url parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2007-6003

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2007-6003

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2007-5995

PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the example parameter...

CVE-2007-6003: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to 1 admincp/auth/secure.php or 2 admincp/auth/checklogin.php...

CVE-2007-5842

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to 1 admincp/auth/secure.php or 2 admincp/auth/checklogin.php...

CVE-2007-5843

PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter...

CVE-2007-5786

Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 HTMLoben.php, 2 incfreigabe.php, 3 incfreigabe1.php, or 4 incfreigabe3.php in include/; 5 incgroup.php; 6 incmanager.php; 7...

CVE-2007-5784

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary PHP code via a URL in the action parameter...

CVE-2007-5780

PHP remote file inclusion vulnerability in pub/pub08comments.php in teatro 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the confignewsurl parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to 1 xargcorner.php, 2 xargcornerbottom.php, and 3 xargcornertop.php...