CVE-2006-3957: Undefined Security Weakness

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter...

CVE-2006-3964: Undefined Security Weakness

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3966: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

CVE-2006-3962: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3930: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-3917: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...

CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...

CVE-2006-3850: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/oldsettings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the...

CVE-2006-3847: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2006-3676

admin/galleryadmin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types...

PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

CVE-2006-3774

PHP remote file inclusion vulnerability in performs.php in the perForms component comperforms 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3793: Undefined Security Weakness

PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SDDIR parameter...

CVE-2006-3777: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-3776: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-3750: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in server.php in the Hashcash Component comhashcash 1.2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

iManage CMS 4.0.12 - 'absolute_path' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File Inclusion...

iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion

Exploit for unknown platform in category web applications =========================================================== iManage CMS = 4.0.12 absolutepath Remote File Inclusion =========================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ /...

CVE-2006-3748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...