CVE-2006-5433

PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGlocalroot parameter...

CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5413

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...

CVE-2006-5385

PHP remote file inclusion vulnerability in admin/adminspam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5314

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...

CVE-2006-5310

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-5311

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5304

PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CVE-2006-5305

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5306

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 RC2 and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/journalsdelete.php, 2 includes/journalspost.php, or 3...

Debian DSA-1034-1 : horde2 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1260 Null characters in the URL parameter bypas...

Debian DSA-1033-1 : horde3 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4190 Several Cross-Site-Scripting vulnerabiliti...

CVE-2006-5252

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2006-5240

PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MYENVBASEENGINELOC parameter...

CVE-2006-5234

Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPWSSOURCEDIR parameter in 1 init.php, 2 users.php, 3 Cookie.php, 4 forms.php, 5 Groups.php, 6 ModSetting.php, 7 Calendar.php, 8 DateTime.php, 9 core.php,...

CVE-2006-5230

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

CVE-2006-5232

Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearchpath parameter in 1 index.php, 2 viewcache.php, 3 sitemap.php, 4 isearch.inc.php, 5 googlesitemap.php, 6 stats.php, or 7 autospiderimg.php. NOTE: this...

CVE-2006-5224

PHP remote file inclusion vulnerability in includes/loggerengine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5222

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...

CVE-2006-5209

PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...