CVE-2007-1961: Undefined Security Weakness

PHP remote file inclusion vulnerability in mutantfunctions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1936: Undefined Security Weakness

PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sacconfigdir parameter...

CVE-2007-1937: Undefined Security Weakness

PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter...

CVE-2007-1895: Undefined Security Weakness

PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a mymsroot cookie, a different vector than CVE-2007-0491 and CVE-2006-4630...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfilename parameter to 1 index.php or 2 backupdb.inc.php in admin/, or other unspecified files, different vectors than CVE-2006-5505. NOTE: this issue has bee...

CVE-2007-1844

Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 button/settingssql.php, 2 settingssql.php, and 3 sources/misc/newday.php...

CVE-2007-1844: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 button/settingssql.php, 2 settingssql.php, and 3 sources/misc/newday.php...

CVE-2007-1843: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter...

CVE-2007-1839: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CodeBB 1.1b3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 passcode.php or 2 langselect...

CVE-2007-1837: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the SitePath parameter to 1 boxes/quotes.php or 2 templates/mangobery/footer.sample.php...

Information disclosure

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1809: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...

CVE-2007-1812: Undefined Security Weakness

PHP remote file inclusion vulnerability in utilitaires/gestionsondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary PHP code via a URL in the repertoirevisiteur parameter...

CVE-2007-1818: Undefined Security Weakness

PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1790: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the installroot parameter to 1 support.inc.php, 2 function.inc.php, 3 rdalobject.inc.php, 4 rdaleditor.inc.php. 5 login.inc.php, 6...

CVE-2006-7185

PHP remote file inclusion vulnerability in includes/userstandard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relativeroot parameter...

CVE-2006-7182

PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2006-7181: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 fichero parameter to morcegoCMS.php or the 2 path parameter to adodb/adodb.inc.php. NOTE: vector 1 has been disputed by a third party who sho...

CVE-2007-1778: Undefined Security Weakness

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1766: Undefined Security Weakness

PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...