CVE-2006-5612: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in aide.php3 aka aide.php in GestArt beta 1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter...

CVE-2006-5610: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5620: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/menubuilder.php in MiniBILL 2006-10-10 1.2.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpagedir parameter, a different vector than CVE-2006-4489...

CVE-2006-5623: Undefined Security Weakness

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5621: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...

CVE-2006-5627: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...

CVE-2005-4814: Undefined Security Weakness

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory...

CVE-2006-5587: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier Mdweb132-postgres allow remote attackers to execute arbitrary PHP code via a URL in the cheminappli parameter in 1 admin/inc/organisations/formorg.inc.php and 2 admin/inc/organisations/countryinsert.php...

CVE-2006-5594: Undefined Security Weakness

PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: it is possible that this issue is related to CakePHP...

CVE-2006-5562: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/database.php in SourceForge aka alexandria 1.0.4 allows remote attackers to execute arbitrary PHP code via the sysdbtype parameter...

CVE-2006-5588: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when registerglobals and magicquotesgpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to 1 includes/rss-reader.php or 2 admin/config.php, different...

CVE-2006-5526: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter in a faq.php, b index.php, c list.php, d login.php, e playlist.ph...

CVE-2006-5519: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Savant2/Savant2Pluginoptions.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5549: Undefined Security Weakness

PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHPBASE parameter. NOTE: this issue has been disputed by a third-party researcher who states that AMFPHPBASE is a constan...

CVE-2006-5527: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the syspath parameter...

CVE-2006-5539: Undefined Security Weakness

PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfghomepath parameter...

CVE-2006-5533: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser01/polview.tpl.php and other unspecified PHP scripts, a...

CVE-2006-5521: Undefined Security Weakness

PHP remote file inclusion vulnerability in DNS/RR.php in NetDNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...

CVE-2006-5546: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigotscmsdirectoriesclasses parameter...

CVE-2006-5548: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...