CVE-2006-2962: Undefined Security Weakness

PHP remote file inclusion vulnerability in sqlfcnsOLD.php in Emergenices Personnel Information System Empris 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter...

CVE-2006-2921: Undefined Security Weakness

PHP remote file inclusion vulnerability in cmproheader.inc.php in Clan Manager Pro CMPRO 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the 1 cmextserver and 2 sitepath parameters...

CVE-2006-2878: Undefined Security Weakness

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...

CVE-2006-2888: Undefined Security Weakness

PHP remote file inclusion vulnerability in wk/wklang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WKwkPath parameter...

CVE-2006-2864: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 APPpathapplications parameter to a BsFaq.class.php, 2 APPpathcore parameter to b fileBrowserInner.php, c file.php, and d viewer.php, and e...

CVE-2006-2866: Undefined Security Weakness

PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...

CVE-2006-2863: Undefined Security Weakness

PHP remote file inclusion vulnerability in class.csphpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...

CVE-2006-2860: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 inc/logincheck.inc.php, 2 inc/adminheader.inc.php, 3 inc/global.php, or 4 inc/mainheader.inc.php. NOTE: some of these vectors were also...

CVE-2006-2845: Undefined Security Weakness

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...

CVE-2006-2844: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to 1 simpleuser/pages/index.inc.php and 2 stats/pages/index.inc.php...

CVE-2006-2871: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter. NOTE: CVE disputes this issue, since $scriptpath is set to a constant value...

CVE-2006-2859: Undefined Security Weakness

PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggierootpath parameter to 1 admin.php or 2 scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBlogg...

CVE-2006-2811: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in 1 index.php, 2 topman.php, 3 approb.php, 4 vacadmb.php, 5 vacadma.php, 6 vacadm.php, 7 statart.php, 8 search.php, 9...

CVE-2006-2819: Undefined Security Weakness

PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cnodeclasspath parameter...

CVE-2006-2744: Undefined Security Weakness

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

CVE-2006-2735: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/langenglish/langactivity.php in Activity MOD Plus Amod 1.1.0, as used with phpBB when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: This is a similar vulnerabili...

CVE-2006-2745: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathfile parameter in a p-editpage.php and b p-editbox.php, and the 2 mytheme and 3 myskin...

CVE-2006-2736: Undefined Security Weakness

PHP remote file inclusion vulnerability in blenddata/blendcommon.php in Blend Portal 1.2.0, as used with phpBB when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: This is a similar vulnerability to CVE-2006-2507...

CVE-2006-2686: Improper Control of Generation of Code

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSAAINCPATH parameter in 1 cached.php3, 2 cron.php3, 3 discussion.php3, 4 filldisc.php3, 5 filler.php3, 6 fillform.php3, 7 go.php3, 8 hiercons.php3, 9...

CVE-2006-2681: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when registerglobals and magicquotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 index.php and 2 inc-common.php...