CWE-94 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-94/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-94 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-94/ 32 32 CVE-2008-7240 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7240/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7240/ Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.

The post CVE-2008-7240 appeared first on CVE Vulnerability.

]]> Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.

The post CVE-2008-7240 appeared first on CVE Vulnerability.

]]> CVE-2008-7183 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7183/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7183/ PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the eva[caminho] parameter to index.php.

The post CVE-2008-7183 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the eva[caminho] parameter to index.php.

The post CVE-2008-7183 appeared first on CVE Vulnerability.

]]> CVE-2008-7152 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7152/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7152/ Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.

The post CVE-2008-7152 appeared first on CVE Vulnerability.

]]> Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.

The post CVE-2008-7152 appeared first on CVE Vulnerability.

]]> CVE-2008-7123 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7123/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7123/ Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00) in the login parameter in an ajout action, which bypasses the regular expression check.

The post CVE-2008-7123 appeared first on CVE Vulnerability.

]]> Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00) in the login parameter in an ajout action, which bypasses the regular expression check.

The post CVE-2008-7123 appeared first on CVE Vulnerability.

]]> CVE-2008-7087 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7087/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7087/ PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter.

The post CVE-2008-7087 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter.

The post CVE-2008-7087 appeared first on CVE Vulnerability.

]]> CVE-2008-7042 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7042/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7042/ PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter.

The post CVE-2008-7042 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter.

The post CVE-2008-7042 appeared first on CVE Vulnerability.

]]> CVE-2008-7067 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7067/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7067/ PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[PT_Config][dir][data] parameter.

The post CVE-2008-7067 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[PT_Config][dir][data] parameter.

The post CVE-2008-7067 appeared first on CVE Vulnerability.

]]> CVE-2008-7070 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7070/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7070/ Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a ” (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.

The post CVE-2008-7070 appeared first on CVE Vulnerability.

]]> Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a ” (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.

The post CVE-2008-7070 appeared first on CVE Vulnerability.

]]> CVE-2008-7073 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7073/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7073/ PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter.

The post CVE-2008-7073 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter.

The post CVE-2008-7073 appeared first on CVE Vulnerability.

]]> CVE-2008-7000 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7000/ Sun, 26 Feb 2023 09:11:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7000/ PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: this might be related to CVE-2005-2255.1.

The post CVE-2008-7000 appeared first on CVE Vulnerability.

]]> PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: this might be related to CVE-2005-2255.1.

The post CVE-2008-7000 appeared first on CVE Vulnerability.

]]>