Security Vulnerabilities, CVEs, Published In October 2012 (File inclusion)
Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[root_path] parameter to usr/extensions/get_tree.inc.php or (2) root_path parameter to usr/extensions/get_infochannel.inc.php.
Max CVSS
7.5
EPSS Score
4.00%
Published
2012-10-04
Updated
2017-08-29
PHP remote file inclusion vulnerability in vb/includes/vba_cmps_include_bottom.php in vBadvanced CMPS 3.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pages[template] parameter.
Max CVSS
7.5
EPSS Score
1.80%
Published
2012-10-01
Updated
2017-08-29
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.
Max CVSS
7.5
EPSS Score
15.21%
Published
2012-10-08
Updated
2012-10-09
3 vulnerabilities found