OpenDock Easy Blog <= 1.4 - (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

CVE-2006-5392

OpenDock FullCore 4.4 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying a URL in the doc_directory parameter across numerous scripts (sw/index_sw.php; sw/lib_cart/; sw/lib_comment/ ; sw/lib_find/find.php...

CVE-2006-5392: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 sw/indexsw.php; 2 cart.php, 3 libcart.php, 4 libreadcart.php, 5 libsyscart.php, and 6 txtinfocart.php in...

CVE-2006-5243: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libfile.php, and 5 libformfile.ph...

CVE-2006-5244: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 downstat.php, 2 file.php, 3 findfile.php, 4 libreadfile.php, and 5...

CVE-2006-5241: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...