CVE-2006-4559: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System YACS CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the contextpathtoroot parameter in 1 articles/populate.php, 2 categories/category.php, 3 categories/populate.php, 4...

CVE-2006-4532: Undefined Security Weakness

PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System YACS CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contextpathtoroot parameter...

YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion

YACS CMS 6.6.1 - contextpathtoroot Remote File Inclusion matasanos YACS CMS last version and maybe all File Inclusion Vulnerability affected software: YACS Yet Another Community System vendor: yacs . you can donwload it from http://www.yetanothercommunitysystem.com level: Highly Critical muy...