TI-2006-02835 CVE-2006-2928 · GHSA-p2qx-mcf6-qw63
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when…
Priority LOW 31
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter in (1) dialog…