CVE-2008-2415: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in template/purpletech/baseinclude.php in DigitalHive aka hive 2.0 RC2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2006-5493: Undefined Security Weakness

PHP remote file inclusion vulnerability in template/purpletech/baseinclude.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...