CVE-2006-5043: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

CVE-2006-5021: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...

CVE-2006-5015: Undefined Security Weakness

PHP remote file inclusion vulnerability in hit.php in Kietu 3.2 allows remote attackers to execute arbitrary PHP code via an FTP URL in the urlhit parameter...

CVE-2006-4990: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter in 1 addfav.php, 2 adm-admlog.php, 3 adm-approve.php, 4 adm-backup.php, 5 adm-cats.php, 6 adm-cinc.php, 7 adm-db.php, 8 adm-editcfg.php, 9...

CVE-2006-4984: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4995: Undefined Security Weakness

PHP remote file inclusion vulnerability in BSQ Sitestats bsqsitestats before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4987: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globalscontentdir parameter in 1 example-view/templates/article.php, 2 example-view/templates/root.php, and 3 example-view/templates/dateslist.php...

CVE-2006-4969: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4970: Undefined Security Weakness

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4966: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire phpQ 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSphpQRootDir parameter...

CVE-2006-4946: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4921: Undefined Security Weakness

PHP remote file inclusion vulnerability in Site@School S@S 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information...

CVE-2006-4920: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Site@School S@S 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to 1 starnet/modules/snallbum/slideshow.php, and 2 starnet/themes/editable/main.inc.php...

CVE-2006-4918: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 envdir parameter to a blank.php, b admin.php, or c builddb.php, and the 2 scriptroot parameter to blank.php...

CVE-2006-4848: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REPCLASS parameter to 1 index.php, 2 arbo.php, 3 framepoint.php, 4 genpage.php, 5 lienvalider.php, 6 appreciation.php, 7 partenariat.php, 8...

CVE-2006-4845: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcconfigapproot parameter...

CVE-2006-4849: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4889: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook SL 1.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 index.php, 2 includes/functions.gb.php, 3 includes/functions.admin.ph...

CVE-2006-4864: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4898: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconfrootpath parameter...