CVE-2006-5076

CVE-2006-5076 relates to OpenConcept Back-End 0.4.5/0.4.5-era builds with multiple PHP remote file inclusion vulnerabilities. The flaw is triggered via the includes_path parameter in several PHP entry points (e.g., admin/index.php, Facts.php, search.php), allowing remote code execution. Related r...

CVE-2006-2682

CVE-2006-2682 concerns a PHP remote file inclusion in Back-End CMS. The affected product is Back-End CMS 0.7.2.1 and earlier, where the vulnerability exists in BE_config.php. An attacker can supply a URL in the _PSL[classdir] parameter, enabling the execution of arbitrary PHP code on the server. ...