CVE-2006-2645: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

Plume CMS 1.0.3 - manager_path Remote File Inclusion

Plume CMS 1.0.3 - managerpath Remote File Inclusion Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS <= 1.0.3 (manager_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== Plume CMS Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...