CVE-2006-4065: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getcalendar.inc.php or the 2 GLOBALSrootpath parameter to b usr/extensions/gettree.inc.p...

Tiny Web Gallery 1.5 - 'Image' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19462/info Tiny Web Gallery is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP...

CVE-2006-4052: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 admin/index.php, 2 admin/adminindex.php, 3 admin/adminglobal.php, 4 admin/login.php, 5 admin/menu.ph...

CVE-2006-4050: Undefined Security Weakness

PHP remote file inclusion vulnerability in autocheckrenewals.php in phpAutoMembersArea phpAMA 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter...

Mafia Moblog 6 - Big.php Remote File Inclusion

Mafia Moblog 6 - Big.php Remote File Inclusion source: https://www.securityfocus.com/bid/19458/info Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

CVE-2006-4061: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repparrapportracine parameter. NOTE: this issue has been disputed by third party researchers, stating...

CVE-2006-4051: Undefined Security Weakness

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4062: Undefined Security Weakness

PHP remote file inclusion vulnerability in usr/extensions/gettree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter...

CVE-2006-4036

PHP remote file inclusion vulnerability in includes/usercpregister.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4034: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter...

CVE-2006-4026: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...

CVE-2006-4045: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...

CVE-2006-4036: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/usercpregister.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4044: Undefined Security Weakness

PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUTPATH parameter...

CVE-2006-4011

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...

VWar 1.5 - joinus.php?vwar_root Remote File Inclusion

VWar 1.5 - joinus.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

VWar 1.5 - member.php?vwar_root Remote File Inclusion

VWar 1.5 - member.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

ModernBill 1.6 - config.php Remote File Inclusion

ModernBill 1.6 - config.php Remote File Inclusion SolpotCrew Community modernbill ver 1.6 DIR Remote File Inclusion Download file : http://freshmeat.net/projects/modernbill/ Bug Found By :Solpot a.k.a k. Hasibuan 03-08-2006 contact: [email protected] Website :...

VWar 1.5 - calendar.php?vwar_root Remote File Inclusion

VWar 1.5 - calendar.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

CVE-2006-4007: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...