CVE-2008-5594

CVE-2008-5594 affects Mini Blog 1.0.1, where directory traversal vulnerabilities in index.php enable remote attackers to include and execute arbitrary local files via a ".." in the (1) page and (2) admin parameters. The flaw is described across multiple sources (NVD/NVD-derived records, CVE lists...

CVE-2008-5594

creationtimestamp| type| source ---|---|--- 2008-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7374...

CVE-2007-5594

CVE-2007-5594 concerns Drupal 5.x before 5.3, where the Drupal Forms API protection is not applied to the user deletion form. This allows remote attackers to delete users via a cross-site request forgery (CSRF) attack. The connected advisories document an upgrade to Drupal 5.3 (e.g., Fedora-2007-...

CVE-2006-5594

The CVE-2006-5594 entry concerns a PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0 (and possibly earlier). The issue allows an attacker to execute arbitrary PHP code by supplying a URL in the page parameter. This is the primary vulnerability described in the co...