EUVD-2006-1890

Malware in sbrugna...

CVE-2006-4083: Undefined Security Weakness

PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-4040

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-4040: Undefined Security Weakness

PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter...

CVE-2006-1890

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

CVE-2006-1890

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...

CVE-2006-1890: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myeventpath parameter in 1 event.php and 2 initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well...