CVE-2006-7184: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine EE 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to 1 fetchsettings.php or 2 fstyles.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-7183: Undefined Security Weakness

PHP remote file inclusion vulnerability in styles.php in Exhibit Engine EE 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter...

CVE-2007-1771: Undefined Security Weakness

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1721: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 Richtxtfunctions.inc.php, 2 adddocfile.php, 3 authcheck.php, 4 browsecurrentcategory.inc.php, 5 docfiledetails.php, 6...

CVE-2007-1702: Undefined Security Weakness

PHP remote file inclusion vulnerability in modflatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-1697: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...

CVE-2007-1715: Undefined Security Weakness

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...

CVE-2007-1708: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

CVE-2007-1695: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...

CVE-2007-1643: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

Unrestricted file upload

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1639: Undefined Security Weakness

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...

CVE-2007-1640: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to 1 language.php and 2 phpadmin/survey.php...

CVE-2007-1628: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Study planner Studiewijzer 0.15 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPLCFGdirroot parameter to 1 service.alert.inc.php or 2 settings.ses.php in inc/; 3...

CVE-2007-1626: Undefined Security Weakness

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1604: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in w-Agora Web-Agora allow remote attackers to upload and execute arbitrary PHP code 1 via a forum message with an attached file, which is stored under forums/hello/hello/notes/ or 2 by using browseavatar.php to upload a file with a double...

CVE-2007-1600: Undefined Security Weakness

PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta aka 0.1.1b allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

CVE-2007-1571: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform AMP 3.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2007-1514: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter...

CVE-2007-1516: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functionsdir parameter...