Vulnerabilities > Somery

DATE CVE VULNERABILITY TITLE RISK
2007-02-04 CVE-2007-0704 Remote Security vulnerability in Somery 0.4.6
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669.
network
low complexity
somery
7.5
2006-09-09 CVE-2006-4669 Remote File Include vulnerability in Somery Include.PHP
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter.
network
high complexity
somery
5.1