Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform AMP 3.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2006-7174

PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this may be the same issue as CVE-2006-5235...

CVE-2006-7168

PHP remote file inclusion vulnerability in includes/notmem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1514

PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP code via a URL in the includedir parameter to 1 login.php, 2 getreminders.php, or 3 getevents.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 inccheckdatelang.php, 2 inccharsetfx.php, 3 incconfigcolor.php, 4 inccurrencyset.php, 5 incdbmakelink.php, 6 incdiagnosticsreportfx.php, 7...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Open Education System OES 0.1beta allow remote attackers to execute arbitrary PHP code via a URL in the CONFINCLUDEPATH parameter to 1 lib-account.inc.php, 2 lib-file.inc.php, 3 lib-group.inc.php, 4 lib-log.inc.php, 5 lib-mydb.inc.php, 6...

Remote file inclusion

PHP remote file inclusion vulnerability in include/adodb-connection.inc.php in ClipShare 1.5.3 allows remote attackers to execute arbitrary PHP code via a URL in the cmd parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

Remote file inclusion

PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1393

PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1391

PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO aka weborganizer 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter...

Remote file inclusion

includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that...

CVE-2006-7153

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7127

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the maindir parameter to 1 forum/main.php and 2 forum/headlines.php...

CVE-2006-7100

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-1219

Admin Phorum 3.3.1a is affected by CVE-2007-1219: a PHP remote file inclusion in actions/del.php that lets an attacker supply a URL via include_path to execute arbitrary PHP code. Impact is remote code execution with partial confidentiality/integrity/availability compromises as per CVSS 2.0 metri...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the donsimgbasepath parameter to 1 attributes.php, 2 images.php, or 3 scan.php in admin/; or 4 attributes.php, 5 dbutils.php, 6 images.php, 7 utils.php, or ...