CVE-2006-4237: Undefined Security Weakness

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote IRSR 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sysSessionPath parameter...

CVE-2006-4270: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component commambelfish 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Mambo Component Display MOSBot Manager - MosConfig_absolute_path Remote File Inclusion

Mambo Component Display MOSBot Manager - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/19621/info The Mambo Display MOSBot Manager component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attack...

CVE-2006-4240: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

DieselScripts Smart Traffic - index.php Remote File Inclusion

DieselScripts Smart Traffic - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19630/info Smart Traffic is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remot...

CVE-2006-4277: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIBDIR parameter to 1 include/novalib/class.novaAdmin.mysql.php and 2 novalib/class.novaRead.mysql.php. NOTE: the provenance of this information...

CVE-2006-4281: Undefined Security Weakness

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

tikiwiki -- multiple vulnerabilities

Secunia reports: Thomas Pollet has discovered a vulnerability in TikiWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the "highlight" parameter in tiki-searchindex.php is not properly sanitised before being returned to the user. This can be...

Mambo Component Display MOSBot Manager - 'MosConfig_absolute_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19621/info The Mambo Display MOSBot Manager component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

CVE-2006-4239: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool OPT Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMinc parameter...

Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion

Mambo Component EstateAgent 1.0.2 - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

CVE-2006-4263: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop comphpshop for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 modphpshop.php, 2 modphpshopallinone.php...

CVE-2006-4278: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter...

CVE-2006-4271: Undefined Security Weakness

PHP remote file inclusion vulnerability in install/upgrade301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the...

[SA21593] NES Game & NES System "phphtmllib" File Inclusion

TITLE: NES Game & NES System "phphtmllib" File Inclusion SECUNIA ADVISORY ID: SA21593 VERIFY ADVISORY: http://secunia.com/advisories/21593/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: NES Game & NES System http://secunia.com/product/11630/ DESCRIPTION: Kacper has...

Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion

source: https://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and...

ToendaCMS 0.x/1.0.x - 'TCMS_Administer' Remote File Inclusion

source: https://www.securityfocus.com/bid/19626/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

CVE-2006-4229: Undefined Security Weakness

PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component comlm before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Mambo Component LMTG Myhomepage 1.2 - Multiple Remote File Inclusions

Mambo Component LMTG Myhomepage 1.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19584/info The lmtgmyhomepage component for Mambo is prone multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploi...

CVE-2006-4230: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 lizge or 2 bade parameters...