PHPAuction view.inc.php phpAds_path Parameter PHP Code Execution - Ver2 (CVE-2006-3984)

A code execution vulnerability has been reported in Albasoftware PHPauction. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2007-3066: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpReactor 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to 1 view.inc.php, 2 users.inc.php, 3 updatecms.inc.php, and 4 polls.inc.php in inc/; and other unspecified files,...

CVE-2006-3984: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter...

PHPAuction 2.1 (maybe higher) with phpAdsNew 2.0.5 RFI

+-------------------------------------------------------------------- + + PHPAuction 2.1 with phpAdsNew 2.0.5 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher with phpAdsNew, + phpAdsNew 2.0.5 maybe...