CVE-2006-5183

Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the 1 adminlog.php, 2 postblog.php, 3 index.php, or 4 index2.php script in /edit...

CVE-2006-5118

PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the ApplicationRoot parameter...

CVE-2006-5126

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2006-5093

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-5068

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen 1 BrudaNews 1.1 and earlier and 2 BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter...

CVE-2006-5022

PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 aka PowerNews allows remote attackers to execute arbitrary PHP code via a URL in the nbs parameter...

CVE-2006-5020

CVE-2006-5020 affects SolidState 0.4 and earlier, exposing multiple PHP remote file inclusion vulnerabilities. An attacker can remote-execute PHP code by supplying a crafted URL in the base_path parameter to a long list of manager/pages scripts (e.g., AccountsPage.*, AddInvoicePage.class.php, etc...

CVE-2006-4987

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globalscontentdir parameter in 1 example-view/templates/article.php, 2 example-view/templates/root.php, and 3 example-view/templates/dateslist.php...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...

CVE-2006-4946

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4912

PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script parameter...

CVE-2006-4828

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

CVE-2006-4769

PHP remote file inclusion vulnerability in abfjs.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abspfad parameter...

CVE-2006-4733

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...

CVE-2006-4713

PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

CVE-2006-4722

PHP remote file inclusion vulnerability in Open Bulletin Board OpenBB 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 index.php and possibly 2 collector.php...

CVE-2006-4644

PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the repmod parameter...

CVE-2006-4639

Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in 1 formulairecommentaires.php, 2 affichage/listenews.php, 3 affichage/newscomplete.php,...

CVE-2006-4638

PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter...