Total
3761 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-0572 | 1 Mindmeld | 1 Mindmeld | 2017-09-29 | 6.8 MEDIUM | N/A |
Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MM_GLOBALS[home] parameter to (1) acweb/admin_index.php; and (2) ask.inc.php, (3) learn.inc.php, (4) manage.inc.php, (5) mind.inc.php, and (6) sensory.inc.php in include/. | |||||
CVE-2008-1963 | 1 Quate | 1 Grape Web Statistics | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter. | |||||
CVE-2008-0551 | 2 Microsoft, Sejoong Namo | 2 Activex, Activesquare | 2017-09-29 | 9.3 HIGH | N/A |
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-1712 | 1 Mx-system | 1 Mxbb | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter. | |||||
CVE-2008-0230 | 1 Osdate | 1 Osdate | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter. | |||||
CVE-2008-1126 | 1 Barryvan Compo | 1 Barryvan Compo Manager | 2017-09-29 | 6.8 MEDIUM | N/A |
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter. | |||||
CVE-2008-0648 | 1 Opensiteadmin | 1 Opensiteadmin | 2017-09-29 | 6.8 MEDIUM | N/A |
Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/. | |||||
CVE-2007-6649 | 1 Matpo Bilder Galerie | 1 Matpo Bilder Galerie | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter. | |||||
CVE-2008-0502 | 1 Connectix | 1 Connectix Boards | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the template_path parameter. | |||||
CVE-2008-0235 | 1 Microsoft | 1 Vfp Ole Server Activex Control | 2017-09-29 | 10.0 HIGH | N/A |
The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method. | |||||
CVE-2008-1505 | 2 Joomla, Sstreamtv | 2 Joomla, Custompages | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php. | |||||
CVE-2007-6655 | 1 Matpo Bilder Galerie | 1 Kontakt Formular | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. | |||||
CVE-2008-1046 | 1 Quinsonnas | 1 Quinsonnas Mail Checker | 2017-09-29 | 6.8 MEDIUM | N/A |
PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter. | |||||
CVE-2008-0390 | 1 Auracms | 2 Auracms, Mod Block Statistik | 2017-09-29 | 7.5 HIGH | N/A |
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php. | |||||
CVE-2007-6657 | 1 Mihalism | 1 Multi Host | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter. | |||||
CVE-2008-0222 | 1 Wordpress | 1 Filemanager | 2017-09-29 | 7.5 HIGH | N/A |
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. | |||||
CVE-2008-1123 | 1 Sitebuilder | 1 Sitebuilder Elite | 2017-09-29 | 6.8 MEDIUM | N/A |
Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to (1) files/carprss.php and (2) files/amazon-bestsellers.php. | |||||
CVE-2007-6568 | 1 Xzero Scripts | 1 Xzero Community Classifieds | 2017-09-29 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter. | |||||
CVE-2008-1776 | 1 Phpblock | 1 Phpblock | 2017-09-29 | 6.8 MEDIUM | N/A |
PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter. | |||||
CVE-2008-1773 | 1 Dragoon | 1 Dragoon | 2017-09-29 | 6.8 MEDIUM | N/A |
PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. |