2 matches found
CVE-2007-5146
CVE-2007-5146 ffects dedi-group Der Dirigent 1.0. Multiple PHP remote file inclusion vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL in the dedi_path parameter to: inc.generate_code.php, fnc.type_forms.php, fnc.type.php (backend/inc/), frontend.php or backend.php (p...
CVE-2006-5507
CVE-2006-5507 concerns multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3. The NVD entry describes that remote attackers can execute arbitrary PHP code by supplying a URL in the cfg_dedi[dedi_path] parameter across several backend scripts (find.php, insert_line.php, f...