CVE-2006-5257

The CVE-2006-5257 entry concerns Ciamos CMS, version 0.9.6b and earlier, vulnerable to a PHP remote file inclusion via the module_cache_path parameter in modules/forum/include/config.php. This allows remote code execution if an attacker supplies a crafted URL. The NVD entry assigns a CVSS v2 base...

CVE-2009-4156

CVE-2009-4156 affects Ciamos CMS (version 0.9.5 and earlier). A PHP remote file inclusion vulnerability exists in modules/pms/index.php that allows an attacker to supply a URL in the module_path parameter to execute arbitrary PHP code on the server. Documents consistently describe the vulnerabili...