CVE-2006-3136

Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIRLIBS parameter in 1 path/action.php, and to files in path/nucleus including 2 media.php, 3 /xmlrpc/server.php, and 4 /xmlrpc/apimetaweblog.inc.php. NOTE: this i...

CVE-2006-3136

The software Nucleus version 3.23 is susceptible to multiple PHP remote file inclusion vulnerabilities. This flaw allows remote attackers to execute arbitrary PHP code by manipulating the DIR_LIBS parameter via a URL. The affected endpoints include path/action.php, and files within path/nucleus s...