CVE-2006-6586

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog vBlog, aka C12 a0.1nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in 1 secure.php or 2 checklogin.php in admin/auth/...

CVE-2006-6586

Vulnerability: CVE-2006-6586 affects Vortex Blog (vBlog, aka C12) - a0.1_nonfunc. Root cause: multiple PHP remote file inclusion via the cfgProgDir parameter in admin/auth/secure.php and admin/auth/checklogin.php. Impact: allows remote attackers to execute arbitrary PHP code on affected systems (...