CVE-2006-4970: Undefined Security Weakness

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the HomePath parameter...

CVE-2006-4966: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire phpQ 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSphpQRootDir parameter...

CVE-2006-4946: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4920: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Site@School S@S 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to 1 starnet/modules/snallbum/slideshow.php, and 2 starnet/themes/editable/main.inc.php...

CVE-2006-4918: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 envdir parameter to a blank.php, b admin.php, or c builddb.php, and the 2 scriptroot parameter to blank.php...

CVE-2006-4921: Undefined Security Weakness

PHP remote file inclusion vulnerability in Site@School S@S 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information...

CVE-2006-4889: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook SL 1.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 index.php, 2 includes/functions.gb.php, 3 includes/functions.admin.ph...

CVE-2006-4849: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4848: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REPCLASS parameter to 1 index.php, 2 arbo.php, 3 framepoint.php, 4 genpage.php, 5 lienvalider.php, 6 appreciation.php, 7 partenariat.php, 8...

CVE-2006-4845: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcconfigapproot parameter...

CVE-2006-4864: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4898: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconfrootpath parameter...

CVE-2006-4863: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in 1 login.php, 2 stats.php, 3 detail.php, or 4 erase.php. NOTE: CVE and a third party dispute this vulnerability,...

CVE-2006-4827: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to 1 admin.php, 2 chart.php, 3 modes.php, or 4 stats.php...

CVE-2006-4828: Undefined Security Weakness

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter...

CVE-2006-4826: Undefined Security Weakness

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2006-4837: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...

CVE-2006-4779: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4780: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4764: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...