CVE-2006-4749: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpATM 1.20 allow remote attackers to execute arbitrary PHP code via the includelocation parameter in 1 activate.php, 2 configure.php, 3 fileop.php, 4 getimg.php, 5 ipblocked.php, 6 register.php, 7 showrecent.php,...

CVE-2006-4769: Undefined Security Weakness

PHP remote file inclusion vulnerability in abfjs.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abspfad parameter...

CVE-2006-4738: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includespath parameter. NOTE: The relativescriptpath vector is already covered by CVE-2006-2270...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4722: Undefined Security Weakness

PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...

CVE-2006-4713: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

RaidenHTTPD SoftParserFileXml Parameter Remote File Inclusion

Binary data 3740.prm...

phpbb -- NULL byte injection vulnerability

Secunia reports: ShAnKaR has discovered a vulnerability in phpBB, which can be exploited by malicious users to compromise a vulnerable system. Input passed to the "avatarpath" parameter in admin/adminboard.php is not properly sanitised before being used as a configuration variable to store avatar...

CVE-2006-4716: Undefined Security Weakness

PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board FSB RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...

CVE-2006-4723: Undefined Security Weakness

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

CVE-2006-4678

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...

CVE-2006-4678: Undefined Security Weakness

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...

CVE-2006-4677: Undefined Security Weakness

PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the REQUEST parameters were dynamically unset ...

CVE-2002-2217: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...

CVE-2006-4669: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...

CVE-2006-4666: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 ide parameter in a article.php; or the 2 pwfile parameter in b delete.php, c modify.php, d admin.php, or e modifygo.php...

CVE-2006-4664: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4670: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 includes/cart.inc.php or 2 extras/extcats.php...

CVE-2006-4644

PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the repmod parameter...

CVE-2006-4649

PHP remote file inclusion vulnerability in bpnews.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...