CVE-2006-7146

CVE-2006-7146 concerns Leicestershire communityPortals 1.0 (build 20051018 and earlier) with a PHP remote file inclusion in bug.php that allows arbitrary PHP code execution via a URL supplied to the cp_root_path parameter. The vulnerability is described as a different vector from CVE-2006-5280. N...

CVE-2004-1519

The CVE-2004-1519 entry is confirmed with concrete details across connected sources: phpBugTracker 0.9.1 is affected by an SQL injection in bug.php. Specifically, the vulnerability allows remote attackers to manipulate the database via (1) the bug_id parameter in a viewvotes operation or (2) the ...