CVE-2006-5762

CVE-2006-5762 describes a PHP remote file inclusion in forgot_pass.php (Free File Hosting 1.1 and earlier; also affects related Free File Hosting/Free Image Hosting components) where an attacker can supply a URL in the AD_BODY_TEMP parameter to execute arbitrary PHP code. The underlying issue is ...

CVE-2006-5670

CVE-2006-5670 is a PHP-based remote file inclusion vulnerability in the free image hosting package (Free Image Hosting 1.0 and earlier). It allows an attacker to remotely execute arbitrary PHP code by supplying a crafted URL in the AD_BODY_TEMP parameter to forgot_pass.php. The vulnerability desc...

CVE-2006-5763

This CVE covers PHP remote file inclusion in Free File Hosting 1.1 (and possibly earlier) where enabling register_globals allows an attacker to pass a URL in the AD_BODY_TEMP parameter to login.php, register.php, or send.php to execute arbitrary PHP code. The issue also notes that Vector 1 affect...

CVE-2007-1715

The CVE-2007-1715 issue affects Free Image Hosting 2.0 and earlier, with a vulnerability in frontpage.php that allows PHP code execution via a URL in the AD_BODY_TEMP parameter (remote file inclusion). The vulnerability arises from including remote files through user-controlled input, enabling ar...

CVE-2006-5671

CVE-2006-5671 is a PHP remote file inclusion vulnerability affecting Free Image Hosting 1.0 and earlier. The issue is triggered via the AD_BODY_TEMP parameter in contact.php, allowing an attacker to supply a URL that leads to remote PHP code execution. The vulnerability is classified with a high ...