CVE-2006-4848

Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REPCLASS parameter to 1 index.php, 2 arbo.php, 3 framepoint.php, 4 genpage.php, 5 lienvalider.php, 6 appreciation.php, 7 partenariat.php, 8...

CVE-2006-4113

The CVE-2006-4113 issue affects Brian Fraval’s HitWeb (genpage-cgi.php) in HitWeb 4.2 and possibly earlier versions, where the REP_INC parameter enables PHP remote file inclusion. This is a remote code execution vulnerability resulting from an insecure inclusion mechanism in genpage-cgi.php, allo...