CVE-2006-4113: Undefined Security Weakness

PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REPINC parameter...

GLSA-200608-19 : WordPress: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200608-19 WordPress: Privilege escalation The WordPress developers have confirmed a vulnerability in capability checking for plugins. Impact : By exploiting a flaw, a user can circumvent WordPress access restrictions when using...

CVE-2006-4085

PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to pagenavigation.php, a different vector than CVE-2006-4055. NOTE: the provenance of this...

CVE-2006-4077

PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager CWFM 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter...

CVE-2006-4076: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition docpile:we 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INITPATH parameter to 1 lib/access.inc.php, 2 lib/folders.inc.php, 3 lib/init.inc.php or 4 lib/templates.inc.php...

CVE-2006-4083: Undefined Security Weakness

PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-4073: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

CVE-2006-4075: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition docpile:we 0.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INITPATH parameter to 1 lib/folder.class.php, 2 lib/email.inc.php, 3 lib/document.class.php or 4...

CVE-2006-4077: Undefined Security Weakness

PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager CWFM 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter...

CVE-2006-4085: Undefined Security Weakness

PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to pagenavigation.php, a different vector than CVE-2006-4055. NOTE: the provenance of this...

CVE-2006-4053

PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter...

CVE-2006-4059: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...

CVE-2006-4063: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getbloginfochannel.inc.php, b usr/extensions/getblogmetainfo.inc.php, or c...

CVE-2006-4055: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to 1 include/colorswitch.php, 2 contentimages.class.php, 3 ipfunctions.php, 4...

CVE-2006-4061: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repparrapportracine parameter. NOTE: this issue has been disputed by third party researchers, stating...

CVE-2006-4050: Undefined Security Weakness

PHP remote file inclusion vulnerability in autocheckrenewals.php in phpAutoMembersArea phpAMA 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter...

CVE-2006-4052: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 admin/index.php, 2 admin/adminindex.php, 3 admin/adminglobal.php, 4 admin/login.php, 5 admin/menu.ph...

CVE-2006-4065: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getcalendar.inc.php or the 2 GLOBALSrootpath parameter to b usr/extensions/gettree.inc.p...

CVE-2006-4051: Undefined Security Weakness

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4054: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 Vb8878b936c2bd8ae0cab parameter to a inc/settstyle.php or b inc/settsmilies.php; or the 2 Vb6c4d0e18a204a63b38f, 3 V18a78b93c3adaaae84e2, or 4...