CVE-2007-2736

Achievo 1.1.0 is affected by a PHP remote file inclusion vulnerability in index.php via the config_atkroot parameter, allowing an attacker to execute arbitrary PHP code. The issue is documented in CVE-2007-2736 and is classified with high impact. The connected sources confirm the vulnerability de...

CVE-2006-2736

CVE-2006-2736 is a PHP remote file inclusion vulnerability affecting Blend Portal 1.2.0 when used with phpBB with register_globals enabled. The flaw resides in blend_data/blend_common.php and allows code execution via a URL in the phpbb_root_path parameter. This entry is corroborated across multi...

CVE-2005-2736

CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...

WebSTAR Mail Detection

Binary data 2736.prm...