CVE-2006-1704

Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php...

CVE-2006-1703

CVE-2006-1703 describes a PHP remote file inclusion in lire.php of Sire 2.0 nws, allowing remote attackers to execute arbitrary PHP code via a URL in the rub parameter. Affected software: Sire 2.0 nws (lire.php). Root cause: improper handling of the rub parameter enabling remote file inclusion. I...

CVE-2006-1704

Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php...