CVE-2006-5165

The CVE-2006-5165 entry concerns a PHP remote file inclusion in inc/functions.inc.php of Skrypty PPA Gallery 1.0 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the config[ppa_root_path] parameter. According to the sources, the vulnerability impact inc...

CVE-2005-2199

CVE-2005-2199 affects the PPA web photo gallery (version 0.5.6) through a flaw in the PHP script inc/functions.inc.php. The root cause is a remote file inclusion (RFI) vulnerability in the config[ppa_root_path] parameter, allowing an attacker to influence included PHP code and potentially execute...