Vulnerabilities (CVE)

Filtered by vendor Mybace Light Subscribe
Filtered by product Mybace Light
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4596 1 Mybace Light 1 Mybace Light 2025-04-03 5.1 MEDIUM N/A
PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) hauptverzeichniss parameter in includes/login_check.php and the (2) template_back parameter in admin/login/content/user_daten.php.