CVE-2006-6041: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

CVE-2006-6065: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/mxcommon.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6051: Undefined Security Weakness

PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter comreporter component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-6045: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the pathskin parameter to 1 adminfoot.php, 2 adminhead.php, or 3 adminlogin.php...

CVE-2006-6044: Undefined Security Weakness

PHP remote file inclusion vulnerability in gallerytop.inc.php in PHPQuickGallery 1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the textFile parameter...

CVE-2006-6033

Multiple directory traversal vulnerabilities in Simple PHP Blog SPHPBlog, probably 0.4.8, allow remote attackers to read arbitrary files and possibly include arbitrary PHP code via a .. dot dot sequence in the blogtheme parameter in 1 index.php, 2 addcgi.php, 3 addlink.php, 4 login.php, 5...

WORK System E-Commerce g_include参数远程文件包含漏洞

WORK System E-Commerce是一款动态内容和站点管理系统。 WORK System E-Commerce在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意指令。 WORK System E-Commerce的index.php和module/forum/forum.php脚本没有正确验证ginclude参数的输入，允许攻击者通过包含本地或外部资源文件执行任意PHP代码。漏洞相关的代码如下： include $ginclude."file.inc"; Laurent Van den Reysen WORK system...

CVE-2006-6018: Undefined Security Weakness

PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the INCPATH parameter, a different vector than CVE-2006-5089. NOTE: this issue is disputed by CVE and third party researchers because INCPATH is ...

Boonex 2.0 Dolphin - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21182/info Dolphin is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the...

CVE-2006-5929

PHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5928

Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter to 1 add-modify.php, 2 delete.php, 3 modify.php, and 4 phpjobscheduler.php...

CVE-2006-5929: Undefined Security Weakness

PHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5931: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to certain PHP scripts in 1 lib/actions/, 2 lib/displays/, 3...

CVE-2006-5928: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter to 1 add-modify.php, 2 delete.php, 3 modify.php, and 4 phpjobscheduler.php...

CVE-2006-5930: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to 1 basicfunctions.php, or 2 pageactionauthor.php...

CVE-2006-5899

The CVE-2006-5899 issue is a PHP remote file inclusion in @cid stats 2.3 via the repertoire parameter of install.php3, enabling remote code execution. The root cause is the presence of install.php3 that can be invoked with a URL parameter to include arbitrary PHP code. The notes in sources indica...

CVE-2006-5910

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the gdocumentRoot parameter to 1 bugreporter/thankyou.php and 2 feedback/thankyou.php in implementation/management/priv/...

CVE-2006-5899: Undefined Security Weakness

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

CVE-2006-5910: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the gdocumentRoot parameter to 1 bugreporter/thankyou.php and 2 feedback/thankyou.php in implementation/management/priv/...

CVE-2006-5911: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the gdocumentRoot parameter to 1 Alias.php, 2 Article.php, 3 ArticleAttachment.php, 4 ArticleComment.php, 5 ArticleData.php, 6 ArticleImage.php, 7...