VYPR

spaw2

by Spaw

CVEs (3)

  • CVE-2006-5291Oct 16, 2006
    risk 0.04cvss epss 0.14

    PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party…

  • CVE-2006-4656Sep 9, 2006
    risk 0.04cvss epss 0.10

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third…

  • CVE-2008-4358Sep 30, 2008
    risk 0.00cvss epss 0.01

    Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.