EUVD-2006-3267

Malware in sbrugna...

CVE-2006-3270

The CVE-2006-3270 entry describes an SQL injection vulnerability in THoRCMS 1.3.1, exploitable via cms_admin.php (e.g., the add_link_mid parameter). The underlying issue is improper input handling allowing remote attackers to craft SQL commands. Exposure includes a remote attacker with network ac...

CVE-2006-3270

SQL injection vulnerability in cmsadmin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via multiple unspecified parameters, such as the addlinkmid parameter. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party...

CVE-2006-3269

CVE-2006-3269 describes a PHP remote file inclusion in THoRCMS 1.3.1, where the parameter phpbb_root_path in includes/functions_cms.php allows remote attackers to execute arbitrary PHP code. The affected software is THoRCMS 1.3.1; the vulnerable component is includes/functions_cms.php. The underl...