CVE-2006-5623

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5624: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System MPCS 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 include.php or 2 functions.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-5612: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in aide.php3 aka aide.php in GestArt beta 1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter...

CVE-2006-5610: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2005-4814: Undefined Security Weakness

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory...

CVE-2006-5623: Undefined Security Weakness

PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool EE Tool 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter...

CVE-2006-5627: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...

CVE-2006-5620: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/menubuilder.php in MiniBILL 2006-10-10 1.2.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpagedir parameter, a different vector than CVE-2006-4489...

CVE-2006-5621: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...

Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion

The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to sanitize input to the 'themesdir' parameter before using it in the 'themes/program/themesettings.inc.php' scri...

CVE-2006-5587: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier Mdweb132-postgres allow remote attackers to execute arbitrary PHP code via a URL in the cheminappli parameter in 1 admin/inc/organisations/formorg.inc.php and 2 admin/inc/organisations/countryinsert.php...

CVE-2006-5562: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/database.php in SourceForge aka alexandria 1.0.4 allows remote attackers to execute arbitrary PHP code via the sysdbtype parameter...

CVE-2006-5594: Undefined Security Weakness

PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: it is possible that this issue is related to CakePHP...

PLS-Bannieres 1.21 - 'Bannieres.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20772/info PLS-Bannieres is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

CVE-2006-5588: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when registerglobals and magicquotesgpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to 1 includes/rss-reader.php or 2 admin/config.php, different...

CVE-2006-5548

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...

CVE-2006-5526: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foingrootpath parameter in a faq.php, b index.php, c list.php, d login.php, e playlist.ph...

CVE-2006-5519: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Savant2/Savant2Pluginoptions.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5533: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser01/polview.tpl.php and other unspecified PHP scripts, a...

CVE-2006-5521: Undefined Security Weakness

PHP remote file inclusion vulnerability in DNS/RR.php in NetDNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...