CVE-2006-5016

The CVE concerns Szava Gyula and Csaba Tamas e-Vision CMS (likely version 1.0). The vulnerable component is admin/x_image.php, where an unrestricted file upload allows remote attackers to place arbitrary files in the /imagebank directory. The vulnerability’s root cause is an unconstrained upload ...

CVE-2006-5017

CVE-2006-5017 corresponds to a SQL injection vulnerability in Szava Gyula and Csaba Tamas e-Vision CMS, affecting the admin/all_users.php component. The issue allows remote attackers to inject arbitrary SQL commands through the from parameter, enabling potential data disclosure or modification. P...

CVE-2006-5016: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/ximage.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory...

CVE-2006-5017: Undefined Security Weakness

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...