CVE-2006-6783

CVE-2006-6783 pertains to logahead UNU 1.0 prior to 20061226. Affected component: plugins/widged/_widged.php (WidgEd plugin). Root cause indicated as an unrestricted file upload vulnerability that may be tied to an authentication bypass, enabling remote attackers to upload arbitrary files. This c...

CVE-2006-6887

The CVE-2006-6887 entry describes an unrestricted file upload vulnerability in logahead UNU 1.0 (before 2006-12-26) allowing remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (WidgEd plugin). The root cause is suggested as a po...