Vulnerabilities > Open Conference Systems > Open Conference Systems

DATE CVE VULNERABILITY TITLE RISK
2006-10-17 CVE-2006-5308 Remote File Include vulnerability in Open Conference Systsems Fullpath
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php.
network
low complexity
open-conference-systems
7.5