CVE-2006-3981: Undefined Security Weakness

PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager MGM 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-3991: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...

CVE-2006-3986: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NLPATH parameter...

CVE-2006-3969: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/comcolophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3966: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

CVE-2006-3962: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3964: Undefined Security Weakness

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3955: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...

CVE-2006-3957: Undefined Security Weakness

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter...

CVE-2006-3947: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in components/commambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...

CVE-2006-3917: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-3850: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/oldsettings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the...

CVE-2006-3847: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2006-3776: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-3793: Undefined Security Weakness

PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SDDIR parameter...

CVE-2006-3755: Undefined Security Weakness

PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-3748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3751: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...