CVE-2006-3917: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...

CVE-2006-3847: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2006-3850: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/oldsettings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the...

CVE-2006-3776: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-3793: Undefined Security Weakness

PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SDDIR parameter...

CVE-2006-3755: Undefined Security Weakness

PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-3750: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in server.php in the Hashcash Component comhashcash 1.2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3751: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3735: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Mail2Forum module for phpBB 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2frootpath parameter to 1 m2f/m2fphpbb204.php, 2 m2f/m2fforum.php, 3 m2f/m2fmailinglist.php or 4 m2f/m2fcron.php...

CVE-2006-3684: Undefined Security Weakness

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pathtocalendar parameter, which overwrites the $pathtocalendar variable from an extract function call...

CVE-2006-3683: Undefined Security Weakness

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-3615: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...

CVE-2006-3608: Undefined Security Weakness

The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file...

CVE-2006-3562: Improper Control of Generation of Code

PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the PXconfigmanagerpath parameter to 1 index.php, 2 rss.php, or 3 search.php, a different set of vectors and versions than CVE-2006-2645 and CVE-2006-0725...

CVE-2006-3556: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3530: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in compccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly up to 1.3.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfigabsolutepath parameter...

CVE-2006-3537: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375...

CVE-2006-3520: Undefined Security Weakness

PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pluginpath0 parameter...

CVE-2006-3517: Undefined Security Weakness

PHP remote file inclusion vulnerability in stats.php in RW::Download, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...