109 matches found
CVE-2007-3221
PHP remote file inclusion vulnerability in admin/spaw/spawcontrol.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...
Remote file inclusion
PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...
CVE-2006-5291
PHP remote file inclusion vulnerability in admin/includes/spaw/spawcontrol.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PH...
CVE-2006-4656
CVE-2006-4656 is a PHP remote file inclusion in SPAW Editor’s spaw_control.class.php (Web Provence SL_Site 1.0 and earlier) allowing code execution via a URL in spaw_root; analysis notes the issue originates in a third‑party SPAW Editor PHP Edition. Related records (CVE-2007-3237/3289) describe t...
CVE-2018-4656
CVE-2018-4656 entry is rejected/not used by its CNA and does not represent an active vulnerability.
MS:63DA1333-5F34-4656-A984-2EB05B4411CF
...