CVE-2006-5730: Undefined Security Weakness

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

CVE-2006-5767: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the droot parameter...

CVE-2006-5768: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to 1 msg/view.php, 2 msg/incmessage.php, 3 msg/incenvoi.php, and 4 admin/inclvoircompet.php...

CVE-2006-5734: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 section parameter in a documentation/common/frametoc.php and b documentation/common/search.php, the 2 reqlang parameter in documentation/common/search.php a...

Soholaunch Pro <= 4.9 r36 Remote File Inclusion Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV57$2006 ----------------------------------------------------------------------------------------------- ECHOADV57$2006Soholaunch Pro =4.9 r36 Multiple Remote File Inclusion...

CVE-2006-5739: Undefined Security Weakness

PHP remote file inclusion vulnerability in cpadmin/cpaindex.php in Leicestershire communityPortals 1.02005-10-1812-31-18 allows remote attackers to execute arbitrary PHP code via a URL in the cprootpath parameter, a different vector than CVE-2006-5280...

CVE-2006-5722: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magicquotesgpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to 1 themesettings.php or 2 index.php, a different vector than CVE-2006-5497. NOTE: the provenan...

CVE-2006-5678: Undefined Security Weakness

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...

CVE-2006-5674: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5670: Undefined Security Weakness

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

CVE-2006-5671: Undefined Security Weakness

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2006-5665: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5673: Undefined Security Weakness

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5636

PHP remote file inclusion vulnerability in common.php in Simple Website Software SWS 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter...

CVE-2006-5636: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in Simple Website Software SWS 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter...

P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...

CVE-2006-5637: Undefined Security Weakness

PHP remote file inclusion vulnerability in faqreply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter...

CVE-2006-5623

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5624: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System MPCS 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 include.php or 2 functions.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-5612: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in aide.php3 aka aide.php in GestArt beta 1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter...