3792 matches found
CVE-2006-4045
PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...
CVE-2006-4036
PHP remote file inclusion vulnerability in includes/usercpregister.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-4011
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...
CVE-2006-4007
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3998
PHP remote file inclusion vulnerability in conf.php in WoWRoster aka World of Warcraft Roster 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3984
PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter...
CVE-2006-3993
PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project TSEP 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter...
CVE-2006-3991
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...
CVE-2006-3966
PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...
CVE-2006-3964
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...
CVE-2006-3922
PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...
CVE-2006-3911
PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...
CVE-2006-3776
PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-3750
PHP remote file inclusion vulnerability in server.php in the Hashcash Component comhashcash 1.2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-3624
Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...
CVE-2006-3624: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...
CVE-2006-3562
PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the PXconfigmanagerpath parameter to 1 index.php, 2 rss.php, or 3 search.php, a different set of vectors and versions than CVE-2006-2645 and CVE-2006-0725...
CVE-2006-3548
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a 1 javascript URI or an external 2 http, 3 https, or 4 ftp URI in the url parameter in services/go.php a...