CVE-2006-2834: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-2841: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...

CVE-2006-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-2137: Undefined Security Weakness

PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

CVE-2006-1781: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

Invision Power Board ipchat.php root_path Parameter Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using Invision Power Board. The ipchat.php script fails to sanitize input passed to the 'rootpath' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...

CVE-2002-2297

PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...