CVE-2006-6615: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/actconstants.php in the Activity Games mxact 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6545: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB mxerrordocs allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

mxBB Module kbmods 2.0.2 - Remote File Inclusion | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

mxBB Module Profile CP 0.91c Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== mxBB Module Profile CP 0.91c Remote File Include Vulnerability ============================================================== mxBB Module Profile Control Panel 0.91c Remote Fil...

CVE-2006-6366: Undefined Security Weakness

Cross-site scripting XSS vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web script or HTML via the js parameter. NOTE: The provenance of this information is unknown; the details ar...

CVE-2006-6349: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...

Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

CVE-2006-6231

vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message...

CVE-2006-6231: Undefined Security Weakness

vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message...

CVE-2006-6065: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/mxcommon.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-5776: Undefined Security Weakness

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in 1 ftp/loader.php and 2 lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outsi...

CVE-2006-5767: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the droot parameter...

Drake CMS < 0.2.3 ALPHA rev.916 - Remote File Inclusion

Coding 4 Fun c4f.pl Drake CMS v0.2.2 ALPHA rev.846 http://drakecms.org ; Class = Remote File Inclusion ; Download = https://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420102 ; Found by = GregStar gregstaratc4fdotpl ;...

CVE-2006-5666: Undefined Security Weakness

SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5610: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

PT-2006-6318 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to the version that fixes the issue in Fully Modded phpBB phpbbfm 2021.4.40 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. This is a result of a PH...

CVE-2006-5588: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when registerglobals and magicquotesgpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to 1 includes/rss-reader.php or 2 admin/config.php, different...

CVE-2006-5547: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 1.0.0 through 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigotscmsdirectoriesincludes parameter...

CVE-2006-5387: Undefined Security Weakness

PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5390: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in the ACP User Registration MMW 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...