PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.osvdb.org/27308 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27289 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27304 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27269 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27256 | vdb-entry x_refsource_OSVDB x_transferred |
| https://www.exploit-db.com/exploits/1829 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.osvdb.org/27275 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27270 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27292 | vdb-entry x_refsource_OSVDB x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/26776 | vdb-entry x_refsource_XF x_transferred |
| http://www.vupen.com/english/advisories/2006/1997 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.osvdb.org/27305 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27272 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27278 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27294 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27273 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27287 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27274 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27284 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27253 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27276 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27306 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27263 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27298 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27295 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27271 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27288 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27310 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27264 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27262 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27257 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27259 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27280 | vdb-entry x_refsource_OSVDB x_transferred |
| http://secunia.com/advisories/20299 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.osvdb.org/27309 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27291 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27267 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27281 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27282 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27301 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27254 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27268 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27258 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27299 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27300 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27297 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27285 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27286 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27296 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27303 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27279 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27277 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/bid/19133 | vdb-entry x_refsource_BID x_transferred |
| http://www.osvdb.org/27283 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27261 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27302 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27260 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27266 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27290 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27293 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/27265 | vdb-entry x_refsource_OSVDB x_transferred |