CVE-2006-5147: Undefined Security Weakness

PHP remote file inclusion vulnerability in wampdir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the nourl parameter...

CVE-2006-5123: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 libpath or 2 langpath parameter in unspecified files, related to code changes intended to fix inclusion, a different...

CVE-2006-5135: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...

CVE-2006-5118: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the ApplicationRoot parameter...

CVE-2006-5100: Undefined Security Weakness

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS aka webnews 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WNBASEDIR parameter...

CVE-2006-5141: Undefined Security Weakness

PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting aka geotarget allows remote attackers to execute arbitrary PHP code via a URL in the anppath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-5102: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONFSYSTEMserverpath parameter...

CVE-2006-5101: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

CVE-2006-5136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSthispath or 2 GLOBALSconfigdir parameter...

CVE-2006-5124: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 target and 2 action parameters in window.php, and possibly the 3 target parameter in home.php...

CVE-2006-5103: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the "right" parameter...

CVE-2006-5105: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the initpath parameter to admin/testing/tests/0030initsyntax.php, or 2 an unspecified parameter to admin/testing/index.php. NOTE: the...

CVE-2006-5132: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to 1 agendaplace.php3, 2 agendaplace2.php3, 3 infoevent.php3, and 4 agenda2.php3, different vectors than CVE-2006-2009...

DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20292/info DeluxeBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it i...

CVE-2006-5093

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5095

PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter. NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed...

CVE-2006-5077

PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

VideoDB <= 2.2.1 (pdf.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ====================================================== VideoDB = 2.2.1 pdf.php Remote File Include Exploit ====================================================== ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :...

[Full-disclosure] Advisory 06/2006: PHProjekt &#40;Remote&#41; Include Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHProjekt Remote Include Vulnerabilities Release Date: 2006/09/29 Last Modified: 2006/09/29 Author: Stefan Esser [email protected] Application: PHProjekt 5.1.1 Severity:...