CVE-2006-4722

PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...

CVE-2006-4644

PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the repmod parameter...

CVE-2006-4638

PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter...

CVE-2006-4639

Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in 1 formulairecommentaires.php, 2 affichage/listenews.php, 3 affichage/newscomplete.php,...

CVE-2006-4639

Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in 1 formulairecommentaires.php, 2 affichage/listenews.php, 3 affichage/newscomplete.php,...

CVE-2006-4557

CVE-2006-4557 affects Bob Jewell Discloser 0.0.4, specifically the plugins/plugins.php file. The vulnerability allows remote code execution via a URL in the type parameter, with ongoing dispute about whether the attacker can actually control type. The CVE notes partial/conditional impact and that...

Pheap CMS <= 1.1 (lpref) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS = 1 lpref Remote File Include Exploit + + + - Script name: Pheap CMS v. 1 - Script site: http://pheap.barekoncept.com/ + + + - Find by: Kacper a.k.a Rahim + -...

CVE-2006-4441

Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter to 1 home.php or 2 impressum.php. NOTE: the provenance of this information is unknown; the details ar...

CVE-2006-4440

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter...

CVE-2006-4441

Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter to 1 home.php or 2 impressum.php. NOTE: the provenance of this information is unknown; the details ar...

CVE-2006-4429

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...

CVE-2006-4368

PHP remote file inclusion vulnerability in includes/functionsportal.php in IntegraMOD Portal 2.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4354

PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the checkpath parameter...

CVE-2006-4321

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component comcpg 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4322

PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component comestateagent for Mambo, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4282

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component commambowiki 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...

CVE-2006-4282

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component commambowiki 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...

CVE-2006-4291

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter...