Filtered by vendor Phpcentral Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-4342 1 Phpcentral 1 Login 2024-08-07 N/A
PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: a third party disputes this vulnerability because of the special nature of the SERVER superglobal array.
CVE-2007-4339 1 Phpcentral 1 Poll Script 2024-08-07 N/A
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter in (1) poll.php and (2) pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable extraction error in functions.php.