CVE-2006-6739

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6740: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to 1 include/body.inc.php or 2 include/bodyadmin.inc.php; or a URL in the incpath parameter to 3 index.inc.php, 4...

CVE-2006-6739: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6738: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Pixel Motion Config.PHP远程命令执行漏洞

Pixel Motion是一款基于PHP的web应用程序。 Pixel Motion不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于‘config. php’脚本对用户提交的web参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Pixel Motion Pixel Motion 2.1.1 目前没有解决方案提供，请关注以下链接： http://www.pixelmotion.org/ !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1...

CVE-2006-6715: Undefined Security Weakness

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsfooter parameter...

CVE-2006-6711: Undefined Security Weakness

PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-6710: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...

CVE-2006-6686: Undefined Security Weakness

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-6666: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter...

CVE-2006-6645: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/langenglish/langadmin.php in the Web Links mxlinks 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2006-6631: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6632: Undefined Security Weakness

PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the topdir parameter...

CVE-2006-6635: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcmsrootpath parameter...

CVE-2006-6633: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...

CVE-2006-6630: Undefined Security Weakness

PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6615: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/actconstants.php in the Activity Games mxact 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6590

PHP remote file inclusion vulnerability in usercpmenu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the scriptfolder parameter...

CVE-2006-6566: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/profilcpconstants.php in the Profile Control Panel CPanel module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6586: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog vBlog, aka C12 a0.1nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in 1 secure.php or 2 checklogin.php in admin/auth/...