EUVD-2007-0701

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2007-0704

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2007-0704

CVE-2007-0704 is a PHP remote file inclusion vulnerability in Somery 0.4.6. The issue arises via the skindir parameter in install.php, allowing remote code execution through a crafted URL. Connected sources confirm the vulnerable component is install.php (Somery 0.4.6) and note the remediation in...

CVE-2007-0704

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2006-4669

The CVE-2006-4669 entry describes a PHP remote file inclusion vulnerability in Somery 0.4.6 and earlier. Specifically, when register_globals is enabled, an attacker can craft a URL to the skindir parameter in admin/system/include.php to execute arbitrary PHP code on the affected system. The vulne...