83 matches found
CVE-2006-3755
Affected software : FlushCMS 1.0.0-pre2 and earlier. Vulnerability : PHP remote file inclusion in Include/editor/class.rich.php allows an attacker to execute arbitrary PHP code via the class_path URL parameter. Impact : remote code execution with the attacker-controlled file path. Root cause : fi...