CVE-2010-3209

Seagull 0.6.7 is vulnerable to multiple remote file inclusion in PHP, allowing remote code execution. The vulnerabilities occur via includeFile in Config/Container.php and HTML/QuickForm.php (fog/lib/pear/), via driverpath in fog/lib/pear/DB/NestedSet.php, and via path in fog/lib/pear/DB/NestedSe...

CVE-2010-3212

Seagull (PHP) is vulnerable to SQL injection in index.php (vulnerable in 0.6.7 and earlier) via the frmQuestion parameter in a retrieve action, combined with PATH_INFO for user/password. OpenVAS also notes multiple remote file inclusion vulnerabilities. Impact per sources: remote attacker can exe...

CVE-2008-0465

The CVE-2008-0465 entry describes a directory traversal vulnerability in Seagull 0.6.3, specifically in the optimizer.php component. The root cause is improper handling of the files parameter, allowing an attacker to traverse directories using dot-dot (..) to read arbitrary files. The vulnerabili...