VYPR

SPAW Editor PHP Edition

by Spaw

CVEs (2)

  • CVE-2006-4656Sep 9, 2006
    risk 0.04cvss epss 0.11

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third…

  • CVE-2008-4358Sep 30, 2008
    risk 0.00cvss epss 0.02

    Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.