Approved changes feed: RSS · Atom

cpe:2.3:a:bernard_pacques:yet_another_community_system_cms:6.6.1:*:*:*:*:*:*:*

part: a version: 6.6.1 update: *

VendorBernard Pacques (1a992bb9-6727-5ba5-9e4c-b534304e712f)
ProductYet Another Community System Cms (1c66ccc4-440a-57e2-bdaf-77b8c0185f2e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4559 vulnerable 2026-06-08 04:49:18.288089 Details available
Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter in (1) articles/populate.php, (2) categories/category.php, (3) categories/populate.php, (4) comments/populate.php, (5) files/file.php, (6) sections/section.php, (7) sections/populate.php, (8) tables/populate.php, (9) users/user.php, and (10) users/populate.php. The articles/article.php vector is covered by CVE-2006-4532.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T19:14:47.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4532 vulnerable 2026-06-08 04:49:18.104830 Details available
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter.
Published: 2006-09-01T23:00:00.000Z
Updated: 2024-08-07T19:14:47.660Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.