EUVD-2006-5117

Malware in sbrugna...

CVE-2006-5132: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to 1 agendaplace.php3, 2 agendaplace2.php3, 3 infoevent.php3, and 4 agenda2.php3, different vectors than CVE-2006-2009...

phpMyAgenda rootagenda Parameter File Include Vulnerability

phpMyAgenda is installed on the remote system. It's an open source event management system written in PHP. The application does not sanitize the 'rootagenda' parameter in some of its files. This may allow an attacker to include arbitrary files, possibly taken from third-party systems, and parse...

CVE-2006-2009: Undefined Security Weakness

PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter...