CVE-2006-5220: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the webyepsIncludePath in 1 files in the programm/lib/ directory including a WYApplication.php, b WYDocument.php, c WYEditor.php, d...

CVE-2006-5203: Undefined Security Weakness

Invision Power Board IPB 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...

CVE-2006-5207: Undefined Security Weakness

PHP remote file inclusion vulnerability in images/smileys/smileyspacks.php in phpMyTeam 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileysdir parameter...

PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...

CVE-2006-5183: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the 1 adminlog.php, 2 postblog.php, 3 index.php, or 4 index2.php script in /edit...

CVE-2006-5182: Undefined Security Weakness

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setupfolder parameter...

CVE-2006-5180: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONFSYSTEMserverpath parameter, a different vector than CVE-2006-5102...

CVE-2006-5187: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace BBaCE 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5189: Undefined Security Weakness

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

CVE-2006-5193: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter...

CVE-2006-5186: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmprelpath parameter...

CVE-2006-5191: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/functionsstatictopics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5192: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZINCLUDEDIR parameter...

CVE-2006-5181: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in 1 changepreferences2.php, 2 createfile.php, 3 uploadlocal.php, and 4 uploadmulti.php, different vectors than CVE-2006-5124...

FreeBSD : phpbb -- NULL byte injection vulnerability (86526ba4-53c8-11db-8f1a-000a48049292)

Secunia reports : ShAnKaR has discovered a vulnerability in phpBB, which can be exploited by malicious users to compromise a vulnerable system. Input passed to the 'avatarpath' parameter in admin/adminboard.php is not properly sanitised before being used as a configuration variable to store avata...

CVE-2006-5167: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 BSXLIBDIR parameter in scripts in /files/ including a abook.php3, b compose-attach.php3, c compose-menu.php3, d compose-new.php3, e...

PixelMotionV2.1.1.txt

!/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..: www.pixelmotion.org/zip/blog2.1.zip Poc.link......:...

CVE-2006-5165: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configpparootpath parameter...

CVE-2006-5155: Undefined Security Weakness

PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the configpdfmodule parameter...

CVE-2006-5154: Undefined Security Weakness

PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter...