CVE-2006-4163

The CVE-2006-4163 entry concerns myWebland miniBloggie (versions 1.0 and earlier). The connected PT-2006-4995 and CVE/NVD records confirm a PHP remote file inclusion in cls_fast_template.php via the fname parameter, which could allow remote attackers to execute arbitrary PHP code. Some analyses n...

CVE-2006-4163

PHP remote file inclusion vulnerability in clsfasttemplate.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter. NOTE: another researcher was unable to find a way to execute code after including it via a URL. CVE...