Active Php Bookmarks

active_php_bookmarks

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Active Php Bookmarks

active_php_bookmarks

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-6167 1Active Php Bookmarks 1Active Php Bookmarks Apr 23, 2026 Nov 29, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_pa...Show more Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variablesShow less
CVE-2003-1255 1Active Php Bookmarks 1Active Php Bookmarks Apr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 6.4 MEDIUM· v2 add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-6167

1Active Php Bookmarks

Apr 23, 2026

Nov 29, 2006

N/A· v4

N/A· v3

7.5 HIGH· v2

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variablesShow less

CVE-2003-1255

1Active Php Bookmarks

Apr 16, 2026

Dec 31, 2003

N/A· v4

N/A· v3

6.4 MEDIUM· v2

add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.