CVE-2006-5739: Undefined Security Weakness

PHP remote file inclusion vulnerability in cpadmin/cpaindex.php in Leicestershire communityPortals 1.02005-10-1812-31-18 allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter, a different vector than CVE-2006-5280...

CVE-2006-5730: Undefined Security Weakness

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

CVE-2006-5734: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 section parameter in a documentation/common/frametoc.php and b documentation/common/search.php, the 2 reqlang parameter in documentation/common/search.php a...

CVE-2006-5768: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to 1 msg/view.php, 2 msg/incmessage.php, 3 msg/incenvoi.php, and 4 admin/inclvoircompet.php...

CVE-2006-5722: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magicquotesgpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to 1 themesettings.php or 2 index.php, a different vector than CVE-2006-5497. NOTE: the provenan...

CVE-2006-5665

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5678: Undefined Security Weakness

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...

CVE-2006-5674: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5671: Undefined Security Weakness

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2006-5670: Undefined Security Weakness

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

CVE-2006-5665: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5673: Undefined Security Weakness

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5636: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in Simple Website Software SWS 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter...

CVE-2006-5637: Undefined Security Weakness

PHP remote file inclusion vulnerability in faqreply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter...

CVE-2006-5623

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5610: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5623: Undefined Security Weakness

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5627: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...

CVE-2006-5621: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...

CVE-2006-5620: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/menubuilder.php in MiniBILL 2006-10-10 1.2.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpagedir parameter, a different vector than CVE-2006-4489...