CVE-2007-1986

CVE-2007-1986 describes multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7. The issue allows remote attackers to execute arbitrary PHP code by supplying URLs through one of three vectors: (1) language_path_core to inc/core_profile.header.php, (2) template_path_core to...

CVE-2009-4264

CVE-2009-4264 affects AROUNDMe 1.1 and earlier. The vulnerability is a PHP remote file inclusion in components/core/connect.php that can be triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to the language_path parameter. The issue o...