CVE-2006-4059: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...

CVE-2006-4055: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to 1 include/colorswitch.php, 2 contentimages.class.php, 3 ipfunctions.php, 4...

CVE-2006-4054: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 Vb8878b936c2bd8ae0cab parameter to a inc/settstyle.php or b inc/settsmilies.php; or the 2 Vb6c4d0e18a204a63b38f, 3 V18a78b93c3adaaae84e2, or 4...

CVE-2006-4063: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getbloginfochannel.inc.php, b usr/extensions/getblogmetainfo.inc.php, or c...

CVE-2006-4065: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getcalendar.inc.php or the 2 GLOBALSrootpath parameter to b usr/extensions/gettree.inc.p...

CVE-2006-4061: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repparrapportracine parameter. NOTE: this issue has been disputed by third party researchers, stating...

CVE-2006-4052: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 admin/index.php, 2 admin/adminindex.php, 3 admin/adminglobal.php, 4 admin/login.php, 5 admin/menu.ph...

CVE-2006-4051: Undefined Security Weakness

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4050: Undefined Security Weakness

PHP remote file inclusion vulnerability in autocheckrenewals.php in phpAutoMembersArea phpAMA 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter...

CVE-2006-4062: Undefined Security Weakness

PHP remote file inclusion vulnerability in usr/extensions/gettree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter...

CVE-2006-4034: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter...

CVE-2006-4045: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...

CVE-2006-4026: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...

CVE-2006-4036: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/usercpregister.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4044: Undefined Security Weakness

PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUTPATH parameter...

CVE-2006-4011

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...

CVE-2006-4007: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...

PHP Live Helper 2.0 - abs_path Remote File Inclusion

PHP Live Helper 2.0 - abspath Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV43$2006 ------------------------------------------------------------------------------ ECHOADV43$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

CVE-2006-4011: Undefined Security Weakness

PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...

PHP Simple Shop 2.0 - abs_path Remote File Inclusion

PHP Simple Shop 2.0 - abspath Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV44$2006 ------------------------------------------------------------------------------ ECHOADV44$2006 PHP Simple Shop = 2.0 abspath Remote File Inclusion...