CVE-2007-4313

Affected software : Php Blue Dragon CMS 3.0.0. Vulnerability : PHP remote file inclusion via the vsDragonRootPath parameter in public_includes/pub_blocks/activecontent.php, allowing remote code execution. Root cause : improper handling of a user-supplied URL leading to remote inclusion. Impact : ...

CVE-2007-4312

The CVE-2007-4312 entry concerns a SQL injection in Php Blue Dragon CMS 3.0.0. The vulnerability occurs in index.php during the “print articles” action, where the parameter article_id can be used by remote attackers to execute arbitrary SQL commands. Connected sources (NVD/NVD-derived records and...