CVE-2006-4156

PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate befor...

CVE-2006-4156

CVE-2006-4156 affects Pearlabs Mafia Moblog versions 6 and earlier. The vulnerability is a PHP remote code execution via the pathtotemplate parameter used in big.php (and possibly related template handling). A third-party dispute notes that pathtotemplate may be defined before its use, and CVE da...

PT-2006-4988 · Pearlabs · Pearlabs Mafia Moblog

Name of the Vulnerable Software and Affected Versions: pearlabs mafia moblog versions 6 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. There is a dispute regarding the validity of this claim, with a third party...