CVE-2006-4987

CVE-2006-4987 concerns Patrick Michaelis’ Wili-CMS. It exposes multiple PHP remote file inclusion flaws via a URL supplied to the globals[content_dir] parameter in three templates (article.php, root.php, dates_list.php). The underlying root cause is unsafely including remote content from a user-c...

CVE-2006-4989

CVE-2006-4989 affects Patrick Michaelis Wili-CMS. Affected component files (thumbnail.php, functions/admin/all.php, functions/admin/init_session.php, functions/all.php, and some example-view/admin_templates files) disclose internal path information via error messages when directly requested, enab...

CVE-2006-4988

Patrick Michaelis Wili-CMS is affected by CVE-2006-4988, with multiple XSS vulnerabilities allowing remote injection of scripts via the query string to relocate.php and the globals[pageid] parameter in example-view/inc/print_button.php, among other vectors. The NVD entry assigns a CVSSv2 base sco...