CVE-2006-4229: Undefined Security Weakness

PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component comlm before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4230: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 lizge or 2 bade parameters...

CVE-2006-4196

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4198

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog wB 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wbclassdir parameter...

CVE-2006-4205: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including 1 Cache.class.php, 2 Customer.class.php, 3 Performance.class.php, 4 Project.class.php, 5...

CVE-2006-4217: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the moduledir parameter, a different vulnerability than CVE-2006-4196. NOTE: the provenance of this information is unknown; the details...

CVE-2006-4198: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog wB 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wbclassdir parameter...

CVE-2006-4196: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4204: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...

CVE-2006-4189: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...

CVE-2006-4207: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to 1 content/content.php or 2 /inc/indexhead.php...

CVE-2006-4160: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibrary parameter to 1 BaseCommand.php, 2 BaseLoader.php, and 3 BaseView.php...

CVE-2006-4158: Undefined Security Weakness

PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-4164: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter...

CVE-2006-4166: Undefined Security Weakness

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to 1 image.php or 2 image.php2...

CVE-2006-4159: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to scripts in Classes/ including 1 Evenement.php, 2 Event.php, 3 Eventformonth.php, 4 Eventforweek.php, 5 MyLog.php, 6...

CVE-2006-4156: Undefined Security Weakness

PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate befor...

CVE-2006-4115: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the CFGlibdir parameter...

CVE-2006-4102: Undefined Security Weakness

PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the confclasspath parameter...

CVE-2006-4103: Undefined Security Weakness

PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...