Filtered by vendor Centipaid Subscriptions
Filtered by product Centipaid Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-6975 1 Centipaid 1 Centipaid 2024-09-17 N/A
PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $class_pwd is set to a static value before the relevant include statement
CVE-2006-6976 1 Centipaid 1 Centipaid 2024-08-07 N/A
PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter.