CVE-2006-6550

PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...

CVE-2006-6551

The CVE-2006-6551 entry concerns a PHP remote file inclusion vulnerability in Tucows Client Code Suite (CCS) 1.2.1015 and earlier. The flaw is in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php where an attacker can trigger RFI by supplying a URL via the _ENV[TCA_HOME] param...

CVE-2006-6557

Technical details about CVE-2006-6557 are not publicly available in the provided documents. No explicit affected products, versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2006-6553

The CVE-2006-6553 entry concerns a PHP remote file inclusion in the NewsSuite 1.03 module for mxBB, specifically in includes/newssuite_constants.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL via the mx_root_path parameter. The reported impact affects c...

CVE-2006-6560

CVE-2006-6560 is a PHP remote file inclusion vulnerability in the mx_modsdb 1.0.0 module for MxBB (MX-System). The issue stems from includes/common.php, where the module_root_path parameter is used in a way that allows an attacker to supply a URL and execute arbitrary PHP code. Impact is remote c...

CVE-2006-6550

CVE-2006-6550 affects Phorum 3.2.11 and earlier, describing a PHP remote file inclusion vulnerability in common.php that could allow an attacker to execute arbitrary PHP code via a URL in the db_file parameter. The CVE entry notes a dispute about the vulnerability because db_file is defined befor...

CVE-2006-6552

PHP remote file inclusion vulnerability in admin/plugins/NPUserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIRADMIN parameter...

CVE-2006-6558

CVE-2006-6558: Affects Crob FTP Server 3.6.1 b.263. Remote attacker can cause denial of service by sending a long sequence of "?A" in LIST and possibly NLST commands. The provided documents confirm the vulnerability details (affected product, vulnerable commands, and impact). No remediation detai...

CVE-2006-6545

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB mxerrordocs allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6541

PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley...

CVE-2006-6538

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause 1 a denial of service device reset via a flood of ARP replies on the wired or wireless radio link and 2 a denial of service device crash via a flood of ARP requests on the wireless link...

CVE-2006-6546

PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork CN:AJ 167f and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter...

CVE-2006-6541

PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley...

CVE-2006-6546

CVE-2006-6546 pertains to PHP remote file inclusion in inc/shows.inc.php of cutenews aj-fork (CN:AJ) version 167f and earlier. The underlying issue is an RFI vulnerability where an attacker can supply a URL via the cutepath parameter to cause arbitrary PHP code execution on the affected server. T...

CVE-2006-6544

The CVE-2006-6544 entry describes a Cross-site scripting (XSS) vulnerability in CM68 News that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected software is CM68 News; the exact component/file and vulnerable version(s) are not explicitly stated in the pr...

CVE-2006-6536

CVE-2006-6536 describes a Cross-site Scripting (XSS) vulnerability in hata.asp of Cilem Haber Free Edition. The issue arises from untrusted input in the hata parameter, enabling remote attackers to inject arbitrary web script or HTML. Public sources in the connected documents confirm the affected...

CVE-2006-6536

Cross-site scripting XSS vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6539

CVE-2006-6539 affects Winamp Web Interface (Wawi) prior to or including 7.5.13. The vulnerability consists of multiple buffer overflows in the security.cpp FindBasicAuth function (related to the /browse URI) triggered by a long username or crafted packet, leading to remote denial of service and p...

CVE-2006-6541

Animated Smiley Generator is affected by a PHP remote file inclusion issue in signer/final.php, exploitable via a URL in the smiley parameter. The vulnerability arises in warez distributions; vendor-disputed claim suggests legitimate developer-provided software may be unaffected. Affected version...

CVE-2006-6540

SQL injection in Bluetrait’s bt-trackback.php (vulnerable before 1.2.0). When trackback is enabled, remote attackers can execute arbitrary SQL commands via unspecified parameters. No remediation details are provided in the connected sources here.