CVE-2006-3949

CVE-2006-3949 affects the Mambo/Joomla Artlinks component (com_artlinks). The issue is a PHP remote file inclusion in artlinks.dispnew.php that accepts a URL via mosConfig_absolute_path, enabling remote execution of arbitrary PHP code. The CVSS-derived impact is Partial for confidentiality, integ...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...