CVE-2005-2412

CVE-2005-2412 describes a PHP remote file inclusion vulnerability in PHP FirstPost’s block.php triggered via the Include parameter, allowing an attacker to execute arbitrary PHP code. The issue is network-exposed with low exploit complexity and no authentication required, resulting in partial int...

CVE-2007-2665

The CVE-2007-2665 issue is a PHP remote file inclusion vulnerability in PhpFirstPost 0.1, exploitable via the Include parameter in block.php to execute arbitrary PHP code. Affected component is PhpFirstPost’s block.php; root cause is improper handling of a user-supplied URL in Include, enabling r...

CVE-2002-0445

The CVE concerns article.php in PHP FirstPost 0.1, where an invalid post number in the post parameter causes an error message that leaks the server’s full pathname. This constitutes an information disclosure vulnerability in the PHP FirstPost 0.1 package. The available records do not provide addi...