CVE-2007-0831: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to 1 index.php, 2 sources/usercp.php, or 3 sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONFpath ...

CVE-2007-0762

PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-0577: Undefined Security Weakness

PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6957: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...

CVE-2007-0487

The CVE-2007-0487 issue is a PHP remote file inclusion in FreeForum 0.9.0 (index.php) exploitable via the fpath parameter, allowing remote code execution. This vulnerability is associated with FreeForum 0.9.0’s index.php and the fpath parameter, and descriptions note that third-party researchers ...

CVE-2007-0487: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used...

CVE-2007-0298

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

CVE-2007-0190

PHP remote file inclusion vulnerability in editaddress.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

CVE-2006-6867

Multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator aka bubla 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the budir parameter to 1 bu/buclaro.php, 2 bu/bucache.php, or 3 bu/buparse.php, different vectors and a different affect...

CVE-2006-6796: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/adminsettings.php in MTCMS 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the insfile parameter...

CVE-2006-6788: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 run.php or 2 ircbot.class.php...

CVE-2003-1314: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook EMGB 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgbadminpath parameter...

CVE-2003-1313: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager EMLM 1.32 allow remote attackers to execute arbitrary PHP code via a URL in 1 the emmladminpath parameter to admin/auth.php or 2 the emmlpath parameter to emmlemailfunc.php...

CVE-2006-6738

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6738: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-6711: Undefined Security Weakness

PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-6720: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/indexsitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the VIEW parameter...

CVE-2006-6645: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/langenglish/langadmin.php in the Web Links mxlinks 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2006-6644: Undefined Security Weakness

PHP remote file inclusion vulnerability in pages/meetingconstants.php in the Meeting mxmeeting 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6552

PHP remote file inclusion vulnerability in admin/plugins/NPUserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIRADMIN parameter...