
CVE-2007-2199 – CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
https://notcve.org/view.php?id=CVE-2007-2199
24 Apr 2007 — PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. Una vulnerabilidad de inclusión remota de archivos PHP en lib/pcltar.lib.php (también se conoc... • https://www.exploit-db.com/exploits/3915 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVE-2006-5625 – N/X WCMS 4.1 - 'nxheader.inc.php' Remote File Inclusion
https://notcve.org/view.php?id=CVE-2006-5625
31 Oct 2006 — PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter. Vulnerabilidad de inclusión remota de archivo en PHP en wwwdev/nxheader.inc.php de N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro c[path... • https://www.exploit-db.com/exploits/2659 •

CVE-2003-1251 – N/X Web Content Management System 2002 Prerelease 1 - 'datasets.php?c_path' Local File Inclusion
https://notcve.org/view.php?id=CVE-2003-1251
31 Dec 2003 — The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code. • https://www.exploit-db.com/exploits/22116 •