CVE-2006-5325: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 mkb.php, 2 iplogger.php, 3 adminboard2.php, or 4 adminlogger.php in includes/,...

CVE-2006-5315: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

CVE-2006-5318: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2006-5308: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems OCS before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in 1 include/theme.inc.php or 2 include/footer.inc.php...

CVE-2006-5307: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in 1 add.php, 2 admin.php, 3 look.php, or 4 re.php...

CVE-2006-5310: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-5292: Undefined Security Weakness

PHP remote file inclusion vulnerability in photocomment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter...

CVE-2006-5289

Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to 1 modules/Calendar/admin/update.php, 2 modules/Calendar/admin/scheme.php, or 3 modules/Calendar/calendar.php...

CVE-2006-5281

PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...

CVE-2006-5282: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5289: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to 1 modules/Calendar/admin/update.php, 2 modules/Calendar/admin/scheme.php, or 3 modules/Calendar/calendar.php...

CVE-2006-5280: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter...

CVE-2006-5283: Undefined Security Weakness

PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...

CVE-2006-5284: Undefined Security Weakness

PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader aka pnews 2.6.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CFGauthphpbbpath parameter...

CVE-2006-5252

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2006-5241

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5241: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5256: Undefined Security Weakness

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-5254: Undefined Security Weakness

PHP remote file inclusion vulnerability in registrationdetailed.inc.php in Mark Van Bellen Detailed User Registration comregistrationdetailed, aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5257: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System CMS 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulecachepath parameter...