EUVD-2006-3748

Malware in sbrugna...

CVE-2006-3754

PHP remote file inclusion vulnerability in Include/editor/richfiles/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classpath parameter...