CVE-2005-1965

CVE-2005-1965 is a PHP remote file inclusion in Siteframe’s siteframe.php (Broadpool Siteframe). The LOCAL_PATH parameter can be manipulated to cause the server to include arbitrary files and execute PHP code on the remote host. Affected component is siteframe.php; impact is remote code execution...

CVE-2005-4824

CVE-2005-4824 affects Siteframe prior to version 3.2.2. The vulnerability is a PHP remote file inclusion in web/classes.php (and related Siteframe entry points) where the LOCAL_PATH parameter is not properly sanitized, allowing an attacker to include arbitrary PHP files from a remote or local sou...

CVE-2006-0675

This CVE describes a Cross-site Scripting (XSS) vulnerability in Siteframe 5.0.1, exposed via the q parameter in search.php. The root cause is improper handling of user-supplied input leading to script or HTML injection, enabling remote attackers to execute script in a victim’s browser. The NVD n...