XOOPS xoopsConfig[language] Parameter Local File Inclusion (DSECRG-08-040)

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'xoopsConfiglanguage' parameter before passing it to a PHP 'includeonce' function in 'xoopslib/modules/protector/main.php'. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker...

Moodle < 1.9.4 'filter/tex/texed.php' 'pathname' Parameter RCE

Binary data 4788.prm...