CVE-2015-7381

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008.

• CWE-94

• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource

Published

Sep 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7374The Remote Agent component in Schneider Electric InduSoft We…
• CVE-2015-7375Schneider Electric InduSoft Web Studio before 8.0 allows rem…
• CVE-2015-7377Cross-site scripting (XSS) vulnerability in pie-register/pie…
• CVE-2015-7378Panda Security URL Filtering before 4.3.1.9 uses a weak ACL …7.8
• CVE-2015-7379Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7380Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7382SQL injection vulnerability in install.php in Web Reference …
• CVE-2015-7383Multiple cross-site scripting (XSS) vulnerabilities in Web R…
• CVE-2015-7384Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to c…
• CVE-2015-7385Cross-site scripting (XSS) vulnerability in Open-Xchange OX …
• CVE-2015-7386Multiple cross-site scripting (XSS) vulnerabilities in inclu…
• CVE-2015-7387ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and ear…