Vulnerabilities > Castor

DATE CVE VULNERABILITY TITLE RISK
2006-10-24 CVE-2006-5481 Code Injection vulnerability in Castor 1.1.1
Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified files.
network
low complexity
castor CWE-94
7.5
2006-10-24 CVE-2006-5480 Code Injection vulnerability in Castor PHP web Builder 1.1.1
PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter.
network
high complexity
castor CWE-94
5.1