CVE-2006-5906

PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES aka ban 0.1 and PLS-Bannieres 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: the issue is disputed by other researchers, who...

CVE-2006-5907

The CVE describes an SQL injection in the bannieres.php module of SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) by Jean-Christophe Ramos. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to inject SQL via user-controlled input. This exposes the p...

CVE-2006-5906

The CVE-2006-5906 issue affects Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1, PLS-Bannieres 1.21) and concerns a remote file inclusion in modules/bannieres/bannieres.php. The vulnerability arises from the chemin parameter, which could be used to supply a URL that leads to arbitrary PHP cod...