Max CVSS 10.0 Min CVSS 5.0 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2004-2104 5.0
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.
30-10-2018 - 16:26 31-12-2004 - 05:00
CVE-2007-5099 7.5
PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
19-10-2017 - 01:30 26-09-2007 - 22:17
CVE-2007-5102 6.8
PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the _path parameter.
19-10-2017 - 01:30 26-09-2007 - 22:17
CVE-2007-0809 7.5
PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2 in ptirhiikmods allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
19-10-2017 - 01:30 07-02-2007 - 11:28
CVE-2007-1697 10.0
PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter.
11-10-2017 - 01:31 27-03-2007 - 01:19
CVE-2007-1626 9.3
PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
11-10-2017 - 01:31 23-03-2007 - 21:19
CVE-2007-1621 10.0
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS[template_path] parameter. NOTE: this issue might b
11-10-2017 - 01:31 23-03-2007 - 00:19
CVE-2007-5098 6.8
Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the set_depth parameter to (1) app.lib/product.control/core.php/prod
29-09-2017 - 01:29 26-09-2007 - 22:17
Back to Top Mark selected
Back to Top