CVE-2006-7044

The CVE-2006-7044 entry concerns Clan Manager Pro (CMPRO) up to version 1.11, where a PHP remote file inclusion flaw exists in comment.core.inc.php. The underlying issue allows an attacker to supply a URL via the sitepath parameter, enabling remote code execution on the affected server. The vulne...

CVE-2006-2921

CVE-2006-2921 affects Clan Manager Pro (CMPRO) 1.1 and earlier. The vulnerability is a PHP remote file inclusion in cmpro_header.inc.php when register_globals is enabled, enabling an attacker to run arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters. The provided do...

CVE-2006-7045

CVE-2006-7045 affects Clan Manager Pro (CMPRO) versions 1.1.0 and earlier. The vulnerability is a PHP remote file inclusion flaw that lets an attacker supply a URL via the (1) rootpath and possibly (2) sitepath parameters to (a) cmpro.ext/comment.core.inc.php and (b) cmpro.intern/comment.core.inc...