CVE-2006-4012

CVE-2006-4012 : Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to poll/poll.php or poll/view_polls.php. The vulnerability is related to SaveWebPortal’s handling of SITE_Path...

CVE-2006-4012

Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITEPath parameter to 1 poll/poll.php or 2 poll/viewpolls.php. NOTE: the menudx.php vector is already covered by CVE-2005-2687...

CVE-2006-4012: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITEPath parameter to 1 poll/poll.php or 2 poll/viewpolls.php. NOTE: the menudx.php vector is already covered by CVE-2005-2687...