EUVD-2006-5266

PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...

[SA22280] PHP "_ecalloc" Integer Overflow Vulnerability

TITLE: PHP "ecalloc" Integer Overflow Vulnerability SECUNIA ADVISORY ID: SA22280 VERIFY ADVISORY: http://secunia.com/advisories/22280/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: PHP 5.1.x http://secunia.com/product/6796/ DESCRIPTION: A vulnerability has...

CVE-2006-5141

CVE-2006-5141 is a PHP remote file inclusion vulnerability in script.php of Kevin A. Gordon Open Geo Targeting (geotarget). An attacker can supply a URL in the anp_path parameter to cause the inclusion of remote PHP code, enabling arbitrary code execution on affected servers. The NVD entry assign...

EUVD-2006-5077

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...

CVE-2006-5089

PHP remote file inclusion vulnerability in mybicserver.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this...

CVE-2006-5088

The connected documents confirm a PHP remote file inclusion in phpMyChat 0.1, specifically in connected_users.lib.php3, exploitable by supplying a URL in the ChatPath parameter to run arbitrary PHP code. The PT-2006-5826 entry reiterates the affected software and suggests restricting access to th...

CVE-2006-5061

PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script AVCX 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

EUVD-2006-5040

PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...

gd: GIF handling buffer overflow

Buffer overflow in the LWZReadByte function in ext/gd/libgd/gdgifin.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with inputcodesize greater than MAXLWZBITS, which triggers an overflow when initializing the table array...

CVE-2006-4826

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

EUVD-2006-4720

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...

CVE-2006-4723

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

EUVD-2006-4701

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4723

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

CVE-2006-4677

Technical details for CVE-2006-4677 are not publicly provided in the supplied documents. No confirmed affected product/version, root cause, or remediation are present here. Monitor for updates from primary sources.

CVE-2002-2217

The CVE-2002-2217 issue affects Web Server Creator - Web Portal (WSC-WebPortal) 0.1. An attacker can trigger remote PHP code execution by supplying a URL in the l parameter to customize.php or the pg parameter to index.php, exploiting PHP remote file inclusion. The PT-2002-2929 entry corroborates...

EUVD-2006-4618

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter...

EUVD-2006-4617

PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2006-4553

PHP remote file inclusion vulnerability in plugin.class.php in the comcomprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4440

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter...