CVE-2006-5093

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5095

PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter. NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed...

CVE-2006-5077

PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

CVE-2006-5083: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Integrated MODs IM Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5094: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionskb.php in the phpBB XS 2 Spain version allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780 or CVE-2006-4893...

CVE-2006-5092: Undefined Security Weakness

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...

CVE-2006-5078: Undefined Security Weakness

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SESSIONdirMain parameter...

CVE-2006-5093: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5087: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in 1 track.php or 2 connect.php...

CVE-2006-5076: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includespath parameter in 1 admin/index.php, 2 Facts.php, or 3 search.php...

CVE-2006-5079: Undefined Security Weakness

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtobtdir parameter...

CVE-2006-5088: Undefined Security Weakness

PHP remote file inclusion vulnerability in connectedusers.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter...

CVE-2006-5081: Undefined Security Weakness

PHP remote file inclusion vulnerability in acc.php in QuickBlogger QB 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5053: Undefined Security Weakness

PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contentpage parameter...

CVE-2006-5070: Undefined Security Weakness

PHP remote file inclusion vulnerability in fsl2/objects/fsformlinks.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfsinitobjpath parameter...

CVE-2006-5062: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/pb/language/langnl.php in PBLang PBL 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter...

CVE-2006-5021

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...

CVE-2006-5020: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter in manager/pages/ scripts including 1 AccountsPage.class.php, 2 AddInvoicePage.class.php, 3 AddIPAddressPage.class.php, 4...

CVE-2006-5021: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...