EUVD-2006-4657

Malware in sbrugna...

CVE-2007-0704

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2007-0704

CVE-2007-0704 is a PHP remote file inclusion vulnerability in Somery 0.4.6. The issue arises via the skindir parameter in install.php, allowing remote code execution through a crafted URL. Connected sources confirm the vulnerable component is install.php (Somery 0.4.6) and note the remediation in...

CVE-2007-0704

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2006-4669

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...