Vulnerabilities (CVE)

Filtered by vendor Robert Jewell Subscribe
Filtered by product Discloser
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4557 1 Robert Jewell 1 Discloser 2024-05-17 7.5 HIGH N/A
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis concurs with the dispute