CVE-2006-5480

CVE-2006-5480 affects the 2le.net Castor PHP Web Builder 1.1.1. The vulnerability is a PHP remote file inclusion in lib/rs.php that allows a remote attacker to execute arbitrary PHP code by supplying a crafted rootpath parameter. This is a server-side class of flaw that enables code execution thr...

CVE-2006-5481

Affected software: 2le.net Castor PHP Web Builder 1.1.1. Vulnerability: Multiple PHP remote file inclusion via the rootpath parameter in several files (lib/code.php, lib/dbconnect.php, lib/error.php, lib/menu.php) and other unspecified files. Impact (as stated): Remote attackers could execute arb...

CVE-2006-5481: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in 1 lib/code.php, 2 lib/dbconnect.php, 3 lib/error.php, 4 lib/menu.php, and other unspecified files. NOTE: the provenance of...

CVE-2006-5480: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2006-4946

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4946

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4946: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...