EUVD-2006-6678

Malware in sbrugna...

EUVD-2006-6669

Malware in sbrugna...

CVE-2006-6686

CVE-2006-6686: PHP remote file inclusion in Carsen Klock TextSend 1.5 (sender.php) allows arbitrary PHP code execution via ROOT_PATH URL input. Affected component: TextSend 1.5; root cause is improper handling of ROOT_PATH enabling inclusion of a remote file. Impact per source: partial confidenti...

CVE-2006-6695: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-6686: Undefined Security Weakness

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...