CVE-2006-4738: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includespath parameter. NOTE: The relativescriptpath vector is already covered by CVE-2006-2270...

CVE-2006-4722

PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...

CVE-2006-4713: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

CVE-2006-4716: Undefined Security Weakness

PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board FSB RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...

CVE-2006-4723: Undefined Security Weakness

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

CVE-2006-4678: Undefined Security Weakness

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the NEAbsPath parameter in 1 install.php and 2 migrateNE2toNE3.php...

CVE-2006-4677: Undefined Security Weakness

PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the REQUEST parameters were dynamically unset ...

CVE-2002-2217: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...

mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion

SolpotCrew Community Mcgallerypro pathtofolder Remote File Inclusion Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip Bug Found By :Solpot a.k.a k. Hasibuan 10-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-06.txt Greetz: choi , h4ntu ,...

CVE-2006-4669: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...

CVE-2006-4666: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 ide parameter in a article.php; or the 2 pwfile parameter in b delete.php, c modify.php, d admin.php, or e modifygo.php...

CVE-2006-4664: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4670: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 includes/cart.inc.php or 2 extras/extcats.php...

CVE-2006-4638: Undefined Security Weakness

PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter...

CVE-2006-4645: Undefined Security Weakness

PHP remote file inclusion vulnerability in akarru.gui/maincontent.php in Akarru Social BookMarking Engine 0.4.3.34 and earlier, and possibly 0.4.4.120, allows remote attackers to execute arbitrary PHP code via a URL in the bmcontent parameter...

CVE-2006-4647: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter...

CVE-2006-4648: Undefined Security Weakness

PHP remote file inclusion vulnerability in bpncom.php in BinGo News BP News 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter...

CVE-2006-4629: Undefined Security Weakness

PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-4637: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in 1 header.php or 2 news.php. NOTE: portions of these details are obtained from third party information...

CVE-2006-4630: Undefined Security Weakness

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter...