CVE-2009-3306

CVE-2009-3306 is tied to ClearSite 4.50 and involves a remote file inclusion (RFI) in include/header.php. The underlying issue is unsanitized user input via the cs_base_path parameter, allowing an attacker to cause arbitrary PHP code execution. OpenVAS entries corroborate a header.php RFI vector ...

CVE-2010-2145

CVE-2010-2145 affects ClearSite Beta 4.50 (and potentially other versions) with multiple PHP remote file inclusion (RFI) vulnerabilities. The issue allows an attacker to execute arbitrary PHP code via a URL in the cs_base_path parameter passed to docs.php and to include/admin/device_admin.php. Th...