CVE-2006-6774: Undefined Security Weakness

PHP remote file inclusion vulnerability in socios/maquetacionsocio.php members/maquetacionmember.php in Ciberia Content Federator 1.0 allows remote attackers to execute arbitrary PHP code via the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6763: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book KISGB allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathtothemes parameter in a authenticate.php, and the 2 defaultpathforthemes parameter in b admin.php and c upconfig.php...

CVE-2006-6748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6738: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6739: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6740: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to 1 include/body.inc.php or 2 include/bodyadmin.inc.php; or a URL in the incpath parameter to 3 index.inc.php, 4...

CVE-2006-6711: Undefined Security Weakness

PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-6710: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...

CVE-2006-6715: Undefined Security Weakness

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsfooter parameter...

CVE-2006-6686: Undefined Security Weakness

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-6645: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/langenglish/langadmin.php in the Web Links mxlinks 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2006-6666: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter...

CVE-2006-6633: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...

CVE-2006-6630: Undefined Security Weakness

PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6631: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6635: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcmsrootpath parameter...

CVE-2006-6632: Undefined Security Weakness

PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the topdir parameter...

CVE-2006-6615: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/actconstants.php in the Activity Games mxact 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6586: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog vBlog, aka C12 a0.1nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in 1 secure.php or 2 checklogin.php in admin/auth/...

CVE-2006-6566: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/profilcpconstants.php in the Profile Control Panel CPanel module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...