Vulnerabilities

TI-2006-05271 CVE-2006-5459 · GHSA-qmc5-93wf-hh65

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier…

LOW 35

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) $_ENGINE[eng_dir] and possibly (2) spaw_root parameters in…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01264 Published 2006-10-23 No fix listed

TI-2006-05104 CVE-2006-5291 · GHSA-cg2v-qgrr-gw86

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in…

MEDIUM 40

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04689 Published 2006-10-16 No fix listed CWE-94

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier…

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in…