CVE-2006-4863: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in 1 login.php, 2 stats.php, 3 detail.php, or 4 erase.php. NOTE: CVE and a third party dispute this vulnerability,...

CVE-2006-4827: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to 1 admin.php, 2 chart.php, 3 modes.php, or 4 stats.php...

CVE-2006-4828: Undefined Security Weakness

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter...

CVE-2006-4826: Undefined Security Weakness

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2006-4837: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...

CVE-2006-4779: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4780: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4770: Undefined Security Weakness

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter...

CVE-2006-4764: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-4749: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpATM 1.20 allow remote attackers to execute arbitrary PHP code via the includelocation parameter in 1 activate.php, 2 configure.php, 3 fileop.php, 4 getimg.php, 5 ipblocked.php, 6 register.php, 7 showrecent.php,...

CVE-2006-4733: Undefined Security Weakness

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...

CVE-2006-4769: Undefined Security Weakness

PHP remote file inclusion vulnerability in abfjs.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abspfad parameter...

CVE-2006-4738: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includespath parameter. NOTE: The relativescriptpath vector is already covered by CVE-2006-2270...

CVE-2006-4713: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

CVE-2006-4716: Undefined Security Weakness

PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board FSB RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...

CVE-2006-4723: Undefined Security Weakness

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

CVE-2006-4678: Undefined Security Weakness

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...

CVE-2002-2217: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...

CVE-2006-4677: Undefined Security Weakness

PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the REQUEST parameters were dynamically unset ...

CVE-2006-4669: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...