CVE-2006-3982

PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICKPATH parameter...

CVE-2006-3947

PHP remote file inclusion vulnerability in components/commambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3947: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in components/commambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3955: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...

CVE-2006-3969: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/comcolophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3957: Undefined Security Weakness

PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter...

CVE-2006-3966: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

CVE-2006-3962: Undefined Security Weakness

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3964: Undefined Security Weakness

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3930: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...

CVE-2006-3917: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgracine parameter...

CVE-2006-3850: Undefined Security Weakness

PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/oldsettings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the...

CVE-2006-3847: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 admin.php, and possibly 2 details.php, 3 modify.php, 4 newgroup.php, 5 newtask.php, and 6 rss.php, in MoSpray aka commospray 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2006-3676

admin/galleryadmin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types...

PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

CVE-2006-3774

PHP remote file inclusion vulnerability in performs.php in the perForms component comperforms 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3793: Undefined Security Weakness

PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SDDIR parameter...

CVE-2006-3777: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...