CVE-2006-6546: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork CN:AJ 167f and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter...

CVE-2006-6553: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/newssuiteconstants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2006-6526: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2006-6462

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter...

CVE-2006-6453

PHP remote file inclusion vulnerability in JOWAMPShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the link parameter...

CVE-2006-6416: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to execute arbitrary PHP code via a URL in the cheminmini parameter to 1 consult/miniseul.php or 2 config.php. NOTE: The provenance of this information is unknown; the details are...

CVE-2006-6426: Undefined Security Weakness

PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the templatefile parameter...

CVE-2006-6341: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the apxrootpath parameter to 1 act/actcheckaccess.php, 2 dsp/dspformbookingctl.php, and 3 dsp/dspbookings.php...

CVE-2006-6360: Undefined Security Weakness

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter...

CVE-2006-6295: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/mxcommon.php in the mxtinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV43$2006 ------------------------------------------------------------------------------ ECHOADV43$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

CVE-2006-6285: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter. NOTE: CVE and other third parties dispute this vulnerability...

CVE-2006-6281: Undefined Security Weakness

PHP remote file inclusion vulnerability in checkstatus.php in dicshunary 0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the dicshunaryrootpath parameter...

CVE-2006-6224

PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to execute arbitrary PHP code via the GLOBALS array...

CVE-2006-6232: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6202: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

CVE-2006-6167: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

kronolith -- arbitrary local file inclusion vulnerability

iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...

CVE-2006-6154: Undefined Security Weakness

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...

CVE-2006-6151: Undefined Security Weakness

PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...