CVE-2006-5102

The CVE-2006-5102 entry describes a PHP remote file inclusion vulnerability in Newswriter SW (Sebastian Baumann and Philipp Wolfer) versions 1.42 and earlier. The flaw exists in include/editfunc.inc.php and allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the NWCONF_...

CVE-2006-5180

CVE-2006-5180 : Newswriter SW 1.42 and earlier by Sebastian Baumann and Philipp Wolfer is affected by a PHP remote file inclusion vulnerability in the component/module used to load configuration (NWCONF_SYSTEM[server_path] parameter). The underlying issue is an insecure inclusion mechanism that a...