CVE-2006-5917: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-4532: Undefined Security Weakness

PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System YACS CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contextpathtoroot parameter...