CVE-2007-1414: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2006-7115

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...

CVE-2006-7130

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter, a different vector than CVE-2006-6770...

CVE-2006-7047: Undefined Security Weakness

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...

PT-2007-1294 · Jobline · Jobline

Name of the Vulnerable Software and Affected Versions: Jobline version 1.1.1 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary code via a URL in the mosConfig absolute path parameter in the admin.jobline.php script. Recommendations: For Jobline...

CVE-2007-0584

CVE-2007-0584 affects the PhP Generic Library & Framework for comm (G-neric) via the file membres/membreManager.php. The vulnerability is a remote file inclusion that allows an attacker to place a URL in the include_path parameter, leading to remote code execution on the affected system. Document...

CVE-2007-0577: Undefined Security Weakness

PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-0301: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/adminmenu.php in FdWeB Espace Membre 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

PT-2007-1732 · Naig · Naig

Name of the Vulnerable Software and Affected Versions: Naig versions 0.5.2 and earlier Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the this path parameter. However, a reliable third party disputes this issue, stating...

CVE-2006-6823: Undefined Security Weakness

PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6774: Undefined Security Weakness

PHP remote file inclusion vulnerability in socios/maquetacionsocio.php members/maquetacionmember.php in Ciberia Content Federator 1.0 allows remote attackers to execute arbitrary PHP code via the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6598: Undefined Security Weakness

Directory traversal vulnerability in viewnfo.php in 1 TorrentFlux before 2.2 and 2 torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the path parameter, a different vector than CVE-2006-6328...

CVE-2006-6512: Undefined Security Weakness

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

CVE-2006-6232

CVE-2006-6232 describes a PHP remote file inclusion vulnerability in DreamAccount 3.1, affecting admin/index.php via a URL in the path parameter. The underlying issue is a RFI in the path handling, allowing an attacker to execute arbitrary PHP code on the server. Documented impact is partial conf...

CVE-2006-6232: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6225: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...

PT-2006-6801 · Active Php · Active Php Bookmarks

Name of the Vulnerable Software and Affected Versions: Active PHP Bookmarks version 1.1.02 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the APB SETTINGS'apb path' parameter in 1 apb common.php or 2 apb.php. However, it is noted that the PHP scripts exi...

PT-2006-6481 · Unknown · Advanced Guestbook

Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file. Recommendations: For Advanced Guestbook version 2.3.1, consider...

PT-2006-6422 · Atutor · Atutor

Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...

CVE-2006-5624: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System MPCS 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 include.php or 2 functions.php. NOTE: the provenance of this information is unknown; the details are...