CVE-2006-3969: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/comcolophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3964: Undefined Security Weakness

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3962: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3966: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-3917: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...

CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...

CVE-2006-3850: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/oldsettings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the...

CVE-2006-3847: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2006-3793: Undefined Security Weakness

PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SDDIR parameter...

CVE-2006-3776: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-3750: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in server.php in the Hashcash Component comhashcash 1.2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3751: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3755: Undefined Security Weakness

PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-3735: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Mail2Forum module for phpBB 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2frootpath parameter to 1 m2f/m2fphpbb204.php, 2 m2f/m2fforum.php, 3 m2f/m2fmailinglist.php or 4 m2f/m2fcron.php...

CVE-2006-3684: Undefined Security Weakness

PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pathtocalendar parameter, which overwrites the $pathtocalendar variable from an extract function call...

CVE-2006-3683: Undefined Security Weakness

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-3615: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...

CVE-2006-3608: Undefined Security Weakness

The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file...