EUVD-2006-4739

Malware in sbrugna...

CVE-2006-4751

Cross-site scripting XSS vulnerability in index.php in Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter...

CVE-2006-4752

Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter...

Design/Logic Flaw

Laurentiu Matei eXpandable Home Page XHP CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using 1 manager.php, 2 standalonemanager.php, and 3 images.php...