CVE-2006-4656

CVE-2006-4656 is a PHP remote file inclusion in SPAW Editor’s spaw_control.class.php (Web Provence SL_Site 1.0 and earlier) allowing code execution via a URL in spaw_root; analysis notes the issue originates in a third‑party SPAW Editor PHP Edition. Related records (CVE-2007-3237/3289) describe t...

spawInclude.txt

Kurdish Security Advisory Spaw Editor Remote Include Vulnerability Our Party is PKK, Our Army HPG, We will Earn contact ? : irc.gigachat.net kurdhack & [email protected] Risk : High Class : Remote Script : Spaw Editor Version : v1.6 and v1.7 Site : www.solmetra.com setBlock'colorpicker'; ?...

CVE-2006-4283

Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spawdir parameter in dialogs/ scripts including 1 a.php, 2 collorpicker.php, 3 img.php, 4 imglibrary.php, 5 table.php, or 6 td.php...

CVE-2006-4283

CVE-2006-4283 affects SOLMETRA SPAW Editor 1.0.6 and 1.0.7. The vulnerability is multiple PHP remote file inclusion via the spaw_dir parameter in dialogs/scripts for files including a.php, collorpicker.php, img.php, img_library.php, table.php, and td.php, allowing arbitrary PHP code execution. CV...

CVE-2006-4283

Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spawdir parameter in dialogs/ scripts including 1 a.php, 2 collorpicker.php, 3 img.php, 4 imglibrary.php, 5 table.php, or 6 td.php...

[Kurdish Security # 23] Spaw Editor Remote Include Vulnerability

Kurdish Security Advisory Spaw Editor Remote Include Vulnerability Our Party is PKK, Our Army HPG, We will Earn contact ? : irc.gigachat.net kurdhack & [email protected] Risk : High Class : Remote Script : Spaw Editor Version : v1.6 and v1.7 Site : www.solmetra.com ? // include wysiwyg config...

phpwcms <= 1.1-RC4 (spaw) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpwcms = 1.1-RC4 spaw Remote File Include Vulnerability =========================================================== PhpwCMS 1.2.6 = Multiple Remote file inclusion vulnerabilities...

PHPWCMS 1.1-RC4 - 'spaw' Remote File Inclusion

PhpwCMS 1.2.6 = Multiple Remote file inclusion vulnerabilities Discovered by : |/| . .. | || ||| | | Vuln In : include $spawroot.'class/lang.class.php'; Affected Files : include/incext/spaw/dialogs/table.php include/incext/spaw/dialogs/a.php include/incext/spaw/dialogs/colorpicker.php...

CVE-2006-2519

Directory traversal vulnerability in include/incext/spaw/spawcontrol.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. dot dot sequences in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition...

CVE-2006-2519

Summary of CVE-2006-2519 (phpwcms/spaw_root RFI) Affected product: phpwcms 1.2.5-DEV (SPA W Editor PHP Edition note indicates the underlying issue may be in SPAW Editor PHP Edition). Vulnerability: Directory traversal allows remote attackers to include arbitrary local files via .. sequences in th...