CVE-2006-3270

The CVE-2006-3270 entry describes an SQL injection vulnerability in THoRCMS 1.3.1, exploitable via cms_admin.php (e.g., the add_link_mid parameter). The underlying issue is improper input handling allowing remote attackers to craft SQL commands. Exposure includes a remote attacker with network ac...

CVE-2006-3269

CVE-2006-3269 describes a PHP remote file inclusion in THoRCMS 1.3.1, where the parameter phpbb_root_path in includes/functions_cms.php allows remote attackers to execute arbitrary PHP code. The affected software is THoRCMS 1.3.1; the vulnerable component is includes/functions_cms.php. The underl...