PT-2006-5892 · Deluxebb · Deluxebb

Name of the Vulnerable Software and Affected Versions: DeluxeBB versions 1.09 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter. This can be exploited by providing a malicious URL to the vulnerable parameter,...

CVE-2006-5155: Undefined Security Weakness

PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the configpdfmodule parameter...

CVE-2006-5154: Undefined Security Weakness

PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter...

CVE-2006-5137

Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to 1 inject PHP code via a theme array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; 2 inject PHP code via a config array parameter to...

CVE-2006-5115

CVE-2006-5115 describes a directory-traversal in the web app component kgcall.php of KGB 1.87 . An attacker can abuse the engine parameter with a ".." path to trick the app into including and executing arbitrary local files, demonstrated by uploading a PHP-coded image with an image/jpeg content t...

CVE-2006-5126

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2006-5118: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the ApplicationRoot parameter...

CVE-2006-5136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSthispath or 2 GLOBALSconfigdir parameter...

CVE-2006-5105: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the initpath parameter to admin/testing/tests/0030initsyntax.php, or 2 an unspecified parameter to admin/testing/index.php. NOTE: the...

CVE-2006-5101: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

CVE-2006-5148: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including 1 search.php, 2 message.php, 3 member.php, 4 mail.php, 5 lostpassword.php, 6...

DeluxeBB 1.09 - Sig.php Remote File Inclusion

DeluxeBB 1.09 - Sig.php Remote File Inclusion source: https://www.securityfocus.com/bid/20292/info DeluxeBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

CVE-2006-5102: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONFSYSTEMserverpath parameter...

CVE-2006-5147: Undefined Security Weakness

PHP remote file inclusion vulnerability in wampdir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the nourl parameter...

CVE-2006-5132: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to 1 agendaplace.php3, 2 agendaplace2.php3, 3 infoevent.php3, and 4 agenda2.php3, different vectors than CVE-2006-2009...

CVE-2006-5135: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...

CVE-2006-5100: Undefined Security Weakness

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS aka webnews 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WNBASEDIR parameter...

CVE-2006-5103: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the "right" parameter...

CVE-2006-5124: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 target and 2 action parameters in window.php, and possibly the 3 target parameter in home.php...

CVE-2006-5123: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 libpath or 2 langpath parameter in unspecified files, related to code changes intended to fix inclusion, a different...