CVE-2006-5427

CVE-2006-5427 is a PHP remote file inclusion vulnerability in Php AMX 0.9.0 (plugins/main.php). The root cause is insecure handling of plug_path when register_globals is enabled or magic_quotes_gpc is disabled, allowing an attacker to pass a URL and execute arbitrary PHP code on the server. Affec...

CVE-2006-5419

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...

CVE-2006-5419

The CVE-2006-5419 entry describes a PHP remote file inclusion in University of Glasgow SID (client.php) when register_globals is enabled. An attacker can cause arbitrary PHP code execution via a URL placed in the dir parameter, enabling network-based exploitation. The vulnerability affects SID’s ...

Lou Portail 1.4.1 (admin_module.php) Remote File Include Vulnerability

No description provided by source. Lou Portail 1.4.1 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://louportail.free.fr/ Author: MP Contact: [email protected] Vuln Code admin/adminmodule.php: ?... include...

[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability

ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...

Segue CMS 1.5.8 - 'themesdir' Remote File Inclusion

+------------------------------------------------------------------------------------------- + Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS themes/program/themesettings.inc.php does not intialize the $themesdir...

EUVD-2006-5384

PHP remote file inclusion vulnerability in classes/ImportMM.class.php in PHPRecipeBook 2.36, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the grbbasedir parameter...

CVE-2006-5386

Summary of CVE-2006-5386: A PHP remote file inclusion in the NuralStorm Webmail project (versions 0.98b and earlier) can allow an attacker to execute arbitrary PHP code. This occurs when register_globals is enabled and an attacker supplies a URL in the DEFAULT_SKIN parameter that is processed by ...

PHPPowerCards 2.10 - txt.inc.php Remote Code Execution

PHPPowerCards 2.10 - txt.inc.php Remote Code Execution +------------------------------------------------------------------------------------------- + phpPowerCards 2.10 txt.inc.php Remote Code Execution Vulnerability...

PHP AMX 0.90 - '/plugins/main.php' Remote File Inclusion

phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code php/plugins/main.php: Vuln 1.0 - require registerglobals = On...

PHPmybibli 3.0.1 - Multiple Remote File Inclusions

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV55$2006 ----------------------------------------------------------------------------------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability...

PHPmybibli 3.0.1 - Multiple Remote File Inclusions

PHPmybibli 3.0.1 - Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV55$2006 ----------------------------------------------------------------------------------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File...

AROUNDMe <= 0.5.2 (templatePath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability ==================================================================...

AROUNDMe 0.5.2 - 'templatePath' Remote File Inclusion

--------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...

BlueShoes lib/googlesearch/GoogleSearch.php APP[path][lib] Parameter Remote File Inclusion

The remote host is using BlueShoes, an application framework and content management system written in PHP. The version of BlueShoes installed on the remote host fails to sanitize input to the 'APPpathlib' parameter before using it to include PHP code in the 'lib/googlesearch/GoogleSearch.php'...

Echo Security Advisory 2006.49

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

MiniBB keyword_replacer 1.0 - pathToFiles File Inclusion

MiniBB keywordreplacer 1.0 - pathToFiles File Inclusion --------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By...

EUVD-2006-5226

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

CVE-2006-5241

CVE-2006-5241 affects OpenDock Easy Gallery ≤ 1.4. Multiple PHP remote file inclusion (RFI) flaws arise when register_globals is enabled. An attacker can cause the application to load arbitrary PHP code by passing a URL in the doc_directory parameter across several scripts (sw/lib_user/file.php, ...

CVE-2006-5240

The CVE refers to a PHP remote file inclusion in Docmint 2.0 and earlier, specifically in engine/require.php. The vulnerability requires register_globals to be enabled and allows remote code execution by supplying a URL in the MY_ENV[BASE_ENGINE_LOC] parameter. This is documented across sources (...