CVE-2006-5402: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 classpath, 2 javascriptpath, and 3 includepath parameters in a cart.php; the 4 classpath parameter in b index.php; the 5 javascriptpath...

CVE-2006-5401: Undefined Security Weakness

PHP remote file inclusion vulnerability in template/barnraiser01/pnewpassword.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter...

CVE-2006-5386: Undefined Security Weakness

PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULTSKIN parameter...

CVE-2006-5392: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 sw/indexsw.php; 2 cart.php, 3 libcart.php, 4 libreadcart.php, 5 libsyscart.php, and 6 txtinfocart.php in...

CVE-2006-5385: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/adminspam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5380: Undefined Security Weakness

Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenidopath parameter to 1 cms/dbfs.php or 2 cms/frontcontent.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenidopath is set to a static value...

CVE-2006-5384: Undefined Security Weakness

PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter...

CVE-2006-5317

PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter...

CVE-2006-5315

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

CVE-2006-5310

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-5325: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 mkb.php, 2 iplogger.php, 3 adminboard2.php, or 4 adminlogger.php in includes/,...

CVE-2006-5315: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

CVE-2006-5310: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-5318: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2006-5307: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in 1 add.php, 2 admin.php, 3 look.php, or 4 re.php...

CVE-2006-5308: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems OCS before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in 1 include/theme.inc.php or 2 include/footer.inc.php...

CVE-2006-5291

PHP remote file inclusion vulnerability in admin/includes/spaw/spawcontrol.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PH...

CVE-2006-5292: Undefined Security Weakness

PHP remote file inclusion vulnerability in photocomment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter...

OpenDock FullCore <= 4.4 Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------------- OpenDock FullCore = v4.4 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact :...

OpenDock FullCore 4.4 - Remote File Inclusion

OpenDock FullCore 4.4 - Remote File Inclusion --------------------------------------------------------------------------------- OpenDock FullCore = v4.4 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact ...