RSS   Vulnerabilities for 'Aroundme'   RSS

2009-12-10
 
CVE-2009-4264

CWE-94
 

 
PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the language_path parameter.

 
2007-04-11
 
CVE-2007-1986

 

 
Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.

 

 >>> Vendor: Barnraiser 2 Products
Igloo
Aroundme


Copyright 2024, cxsecurity.com

 

Back to Top