CVE-2009-4747

CVE-2009-4747 describes a remote file inclusion (RFI) vulnerability in All In One Control Panel (AIOCP) 1.4.001, specifically in public/code/cp_html2xhtmlbasic.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the page parameter, repr...

CVE-2009-3220

The CVE-2009-3220 entry applies to All In One Control Panel (AIOCP) 1.4.001, where a PHP remote file inclusion vulnerability exists in cp_html2txt.php. An attacker can supply a URL in the page parameter to cause arbitrary PHP code execution on the remote host. The vulnerability is triggered throu...