EUVD-2006-6208

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...

EUVD-2006-5744

Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the racine parameter to 1 functionlog.php, 2 functionbaliseurl.php, or 3 connection.php...

EUVD-2006-5652

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...

CVE-2006-5624

CVE-2006-5624 affects Multi-Page Comment System (MPCS) 1.0.0 and earlier. Multiple PHP remote file inclusion vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) include.php or (2) functions.php. Root cause: unvalidated path parameter enablin...

EUVD-2006-5503

Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler Rhode Island RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECTROOT parameter to 1 xml2rss.php, 2 configlocal.php, 3 rssonate.php, and 4 sql2xml.php in Src/getFeed/inc/...

CVE-2006-5507

CVE-2006-5507 concerns multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3. The NVD entry describes that remote attackers can execute arbitrary PHP code by supplying a URL in the cfg_dedi[dedi_path] parameter across several backend scripts (find.php, insert_line.php, f...

EUVD-2006-5267

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

EUVD-2006-5226

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

PHP 5.1.x < 5.1.4 Multiple Vulnerabilities

Binary data 3509.prm...

EUVD-2006-5205

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the webyepsIncludePath in 1 files in the programm/lib/ directory including a WYApplication.php, b WYDocument.php, c WYEditor.php, d...

EUVD-2006-5006

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter in manager/pages/ scripts including 1 AccountsPage.class.php, 2 AddInvoicePage.class.php, 3 AddIPAddressPage.class.php, 4...

CVE-2006-5021

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the root parameter in imgen.php, and the rootpath parameter in 2 admin/config.php, 3 common.php, and 4 admin/index.php. NOTE: the provenance of this...

EUVD-2006-4877

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to 1 fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or 2 fckeditor/editor/dialog/fcklink.php...

EUVD-2006-4658

Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 includes/cart.inc.php or 2 extras/extcats.php...

e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================== e107 = 0.75 GLOBALS Overwrite Remote Code Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...

CVE-2006-4264

Multiple PHP remote file inclusion vulnerabilities in the lmtgmyhomepage Component comlmtgmyhomepage for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 install.lmtghomepage.php and 2 mtghomepage.php. NOTE: this issue has been...

EUVD-2006-4150

Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibrary parameter to 1 BaseCommand.php, 2 BaseLoader.php, and 3 BaseView.php...

EUVD-2006-4065

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

CVE-2006-4076

CVE-2006-4076 affects Wim Fleischhauer Docpile (docpile:we) 0.2.2. The issue is a set of PHP remote file inclusion vulnerabilities allowing an attacker to trigger remote PHP code execution by supplying a URL via the INIT_PATH parameter to any of: lib/access.inc.php, lib/folders.inc.php, lib/init....

EUVD-2006-3983

Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the commtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 Savant2Pluginstylesheet.php, 2...