CVE-2006-5252

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2006-5241

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5252: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2006-5256: Undefined Security Weakness

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-5249: Undefined Security Weakness

PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 tagit2b allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...

CVE-2006-5254: Undefined Security Weakness

PHP remote file inclusion vulnerability in registrationdetailed.inc.php in Mark Van Bellen Detailed User Registration comregistrationdetailed, aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5243: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libfile.php, and 5 libformfile.ph...

CVE-2006-5255: Undefined Security Weakness

PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter. NOTE: another researcher has observed that languageFile is defined before use. CVE analysis as of 20061012 concurs...

CVE-2006-5240: Undefined Security Weakness

PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MYENVBASEENGINELOC parameter...

CVE-2006-5241: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5261: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cfgincludedir parameter in 1 dispform.php3, 2 dispsmileys.php3, 3 littlenews.php3, and 4 index.php3 in include/...

CVE-2006-5257: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System CMS 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulecachepath parameter...

CVE-2006-5230

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

CVE-2006-5235: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionskb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...

CVE-2006-5234: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPWSSOURCEDIR parameter in 1 init.php, 2 users.php, 3 Cookie.php, 4 forms.php, 5 Groups.php, 6 ModSetting.php, 7 Calendar.php, 8 DateTime.php, 9 core.php,...

CVE-2006-5232: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearchpath parameter in 1 index.php, 2 viewcache.php, 3 sitemap.php, 4 isearch.inc.php, 5 googlesitemap.php, 6 stats.php, or 7 autospiderimg.php. NOTE: this...

CVE-2006-5222: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...

CVE-2006-5226: Undefined Security Weakness

PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-5224: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/loggerengine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5223: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsuserviewedposts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...