CVE-2006-5441

CVE-2006-5441 : In Comdev Web Blogger 4.1, the adminfoot.php file is vulnerable to PHP remote file inclusion when register_globals is enabled. An attacker can supply a URL in the path[docroot] parameter to execute arbitrary PHP code. This is exercised via a remote inclusion vector and is describe...

CVE-2007-3084

The CVE-2007-3084 entry describes a PHP remote file inclusion vulnerability in Comdev Web Blogger 4.1. Specifically, sampleblogger.php is vulnerable to arbitrary PHP code execution via a URL supplied in the path[docroot] parameter, representing a different vector from CVE-2006-5441. The available...