CVE-2006-6788

Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 run.php or 2 ircbot.class.php...

CVE-2006-6788: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 run.php or 2 ircbot.class.php...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6600: Undefined Security Weakness

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6273

spindex.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6272: Undefined Security Weakness

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-6273: Undefined Security Weakness

spindex.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message...

CVE-2006-6185: Undefined Security Weakness

Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary files via a .. dot dot in the dir parameter to index.php...

CVE-2006-6138: Undefined Security Weakness

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter...

CVE-2006-5930: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to 1 basicfunctions.php, or 2 pageactionauthor.php...

CVE-2006-5931: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to certain PHP scripts in 1 lib/actions/, 2 lib/displays/, 3...

CVE-2006-5609: Undefined Security Weakness

Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter...

CVE-2006-5419

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...

CVE-2006-4034: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-2419: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-1294: Undefined Security Weakness

PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter...