CVE-2007-1424: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1429: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

CVE-2007-1421: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 functionskb.php, 2 themenportalmitte.php, or 3 loggerengine.php in includes/...

CVE-2007-1414: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2007-1416: Undefined Security Weakness

PHP remote file inclusion vulnerability in createurl.php in JCcorp aka James Coyle URLshrink allows remote attackers to execute arbitrary PHP code via a URL in the formurl parameter...

CVE-2007-1415: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 classpath parameter to a includes/resafunc.inc.php b admin/notices/perso.inc.php, or c admin/quotas/main.inc.php; the 2 basepath parameter ...

CVE-2007-1393: Undefined Security Weakness

PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1340: Undefined Security Weakness

PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sqllog parameter...

CVE-2006-7156

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-7136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2007-1299: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

CVE-2006-7156: Undefined Security Weakness

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-7135: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2007-1288: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

CVE-2006-7146: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter, a different vector than CVE-2006-5280. NOTE: CVE disputes this issue, since bug.php is...

CVE-2006-7120

PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. NOTE: this issue might be in phpHtmlLib. NOTE: CVE disputes this issue for proper...

CVE-2006-7124: Undefined Security Weakness

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter...

CVE-2006-7131: Undefined Security Weakness

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the webroot parameter...

CVE-2006-7128: Undefined Security Weakness

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter...

CVE-2006-7130: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter, a different vector than CVE-2006-6770...