65 matches found
CVE-2006-4426
PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite AES 1.0a5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSAPATH parameter...
CVE-2006-4426
CVE-2006-4426 describes a PHP remote file Inclusion in AlberT-EasySite (AES) 1.0a5 and earlier. The vulnerability exists in AES/modules/auth/phpsecurityadmin/include/logout.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the PSA_PATH parameter. Affected softwar...
CVE-2005-4426
CVE-2005-4426 involves YaBB before 2.1 where an interpretation conflict allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF extension, causing the HTML to execute in Internet Explorer (as described for CVE-2005-3312). The issue is tied to YaBB’s ...