CVE-2006-5549: Undefined Security Weakness

PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHPBASE parameter. NOTE: this issue has been disputed by a third-party researcher who states that AMFPHPBASE is a constan...

CVE-2006-5546: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigotscmsdirectoriesclasses parameter...

CVE-2006-5539: Undefined Security Weakness

PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfghomepath parameter...

CVE-2006-5526: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter in a faq.php, b index.php, c list.php, d login.php, e playlist.ph...

CVE-2006-5521: Undefined Security Weakness

PHP remote file inclusion vulnerability in DNS/RR.php in NetDNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...

CVE-2006-5519: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Savant2/Savant2Pluginoptions.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5506: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in 1 inc/prepend.inc.php, 2 inc/lib/boxes.lib.php, 3 inc/lib/tools.lib.php, 4 tools/trackback/index.php, and 5 tools/utf8conversion/index.php in admin/; a...

CVE-2006-5497: Undefined Security Weakness

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter...

ArticleBeach Script 2.0 - index.php Remote File Inclusion

ArticleBeach Script 2.0 - index.php Remote File Inclusion ------------------------------------------------------------------------------ ArticleBeach Script = 2.0 page Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni...

CVE-2006-5495: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathred2 parameter to a msdazupdata/redaktion/artikel/up/index.php; b addtort.php, c colorpik2.php, d colorpik3.php, e extrasmenu.php, f...

CVE-2006-5493: Undefined Security Weakness

PHP remote file inclusion vulnerability in template/purpletech/baseinclude.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5507: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Der Dirigent DeDi 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgdedidedipath parameter in 1 find.php, 2 insertline.php, 3 fullscreen.php, 4 changecase.php, 5 insertlink.php, 6 inserttable.php, 7...

CVE-2006-5473

PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the libdir parameter. NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the...

CVE-2006-5485: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERGPATH parameter to 1 entrancePage.tpl.php, 2 generalToolBox.tlb.php, 3 myToolBox.tlb.php, 4 scriplet.inc.php, 5 simplePage.tpl.php, 6...

CVE-2006-5471: Undefined Security Weakness

PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdir and 2 libdir parameters...

CVE-2006-5480: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2006-5473: Undefined Security Weakness

PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the libdir parameter. NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the...

CVE-2006-5472: Undefined Security Weakness

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter in 1 lib/registry.lib.php, 2 lib/sqlcompose.lib.php, and 3 lib/sqlsearch.lib.php...

CVE-2006-5481: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in 1 lib/code.php, 2 lib/dbconnect.php, 3 lib/error.php, 4 lib/menu.php, and other unspecified files. NOTE: the provenance of...

CVE-2006-5460: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phphtrealpath parameter to 1 index.php, 2 certain other scripts in the top-level directory, and 3 certain scripts in the admin/ directory. NOTE:...