EUVD-2006-4976

Malware in sbrugna...

CVE-2006-4990: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter in 1 addfav.php, 2 adm-admlog.php, 3 adm-approve.php, 4 adm-backup.php, 5 adm-cats.php, 6 adm-cinc.php, 7 adm-db.php, 8 adm-editcfg.php, 9...

CVE-2006-4828: Undefined Security Weakness

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter...