CVE-2006-5895

CVE-2006-5895 affects EncapsCMS 0.3.6, where the PHP vulnerability resides in core/core.php. An attacker can cause a remote file inclusion by supplying a URL in the root parameter, allowing execution of arbitrary PHP code on affected systems. The issue is described in multiple sources as a PHP re...

CVE-2007-0635

CVE-2007-0635 affects EncapsCMS 0.3.6. The vulnerability is a PHP remote file inclusion: an attacker can supply a URL via config[path] (to common_foot.php or blogs.php) or via config[theme] (to admin/gallery_head.php), allowing arbitrary PHP code execution on the server. The description explicitl...