CVE-2006-5255: Undefined Security Weakness

PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter. NOTE: another researcher has observed that languageFile is defined before use. CVE analysis as of 20061012 concurs...

CVE-2006-5243: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libfile.php, and 5 libformfile.ph...

CVE-2006-5257: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System CMS 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulecachepath parameter...

CVE-2006-5261: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cfgincludedir parameter in 1 dispform.php3, 2 dispsmileys.php3, 3 littlenews.php3, and 4 index.php3 in include/...

CVE-2006-5240: Undefined Security Weakness

PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MYENVBASEENGINELOC parameter...

CVE-2006-5241: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5235: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionskb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...

CVE-2006-5234: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPWSSOURCEDIR parameter in 1 init.php, 2 users.php, 3 Cookie.php, 4 forms.php, 5 Groups.php, 6 ModSetting.php, 7 Calendar.php, 8 DateTime.php, 9 core.php,...

CVE-2006-5232: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearchpath parameter in 1 index.php, 2 viewcache.php, 3 sitemap.php, 4 isearch.inc.php, 5 googlesitemap.php, 6 stats.php, or 7 autospiderimg.php. NOTE: this...

CVE-2006-5226: Undefined Security Weakness

PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-5223: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsuserviewedposts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5224: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/loggerengine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5220: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the webyepsIncludePath in 1 files in the programm/lib/ directory including a WYApplication.php, b WYDocument.php, c WYEditor.php, d...

CVE-2006-5207: Undefined Security Weakness

PHP remote file inclusion vulnerability in images/smileys/smileyspacks.php in phpMyTeam 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileysdir parameter...

CVE-2006-5183: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the 1 adminlog.php, 2 postblog.php, 3 index.php, or 4 index2.php script in /edit...

CVE-2006-5187: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace BBaCE 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5189: Undefined Security Weakness

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

CVE-2006-5180: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONFSYSTEMserverpath parameter, a different vector than CVE-2006-5102...

CVE-2006-5193: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter...

CVE-2006-5186: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmprelpath parameter...