CVE-2006-5929

PHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the installedconfigfile parameter. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5893

Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to 1 mysql.php and 2 mysqli.php in include/classes/pear/DB/...

CVE-2006-5831

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2006-5804

PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-5768

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to 1 msg/view.php, 2 msg/incmessage.php, 3 msg/incenvoi.php, and 4 admin/inclvoircompet.php...

CVE-2006-5766

PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the configpublicdir parameter...

CVE-2006-5703: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in tiki-featuredlink.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements...

CVE-2006-5627

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...

CVE-2006-5590

PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Coppermine Photo Gallery 1.4.9 - SQL Injection

Coppermine Photo Gallery 1.4.9 - SQL Injection !/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/...

CVE-2006-5523

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

CVE-2006-5521

PHP remote file inclusion vulnerability in DNS/RR.php in NetDNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...

EUVD-2006-5503

Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler Rhode Island RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECTROOT parameter to 1 xml2rss.php, 2 configlocal.php, 3 rssonate.php, and 4 sql2xml.php in Src/getFeed/inc/...

CVE-2006-5472

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter in 1 lib/registry.lib.php, 2 lib/sqlcompose.lib.php, and 3 lib/sqlsearch.lib.php...

CVE-2006-5458

PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phphtrealpath parameter...

CVE-2006-5433

PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGlocalroot parameter...

CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5413

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...

CVE-2006-5385

PHP remote file inclusion vulnerability in admin/adminspam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...