CVE-2006-4053

The CVE-2006-4053 issue affects ME Download System 1.3, as reported across multiple advisories. The vulnerability is a PHP remote file inclusion in templates/header.php that allows an attacker to chain a URL parameter (example: Vb8878b936c2bd8ae0cab) to cause arbitrary PHP code execution on the a...

CVE-2006-4054

CVE-2006-4054 affects ME Download System 1.3 and allows remote PHP code execution via multiple remote file inclusion vulnerabilities. The vulnerable vectors are URL parameters: (1) Vb8878b936c2bd8ae0cab used in inc/sett_style.php or inc/sett_smilies.php, and (2) Vb6c4d0e18a204a63b38f, (3) V18a78b...