Infireal Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/infireal/ Sun, 26 Feb 2023 09:11:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Infireal Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/infireal/ 32 32 CVE-2008-6955 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6955/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6955/ mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.

The post CVE-2008-6955 appeared first on CVE Vulnerability.

]]> mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.

The post CVE-2008-6955 appeared first on CVE Vulnerability.

]]> CVE-2008-6956 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6956/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6956/ Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6956 appeared first on CVE Vulnerability.

]]> Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6956 appeared first on CVE Vulnerability.

]]> CVE-2008-6262 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6262/ Sun, 26 Feb 2023 09:11:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6262/ SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6262 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6262 appeared first on CVE Vulnerability.

]]> CVE-2008-6263 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6263/ Sun, 26 Feb 2023 09:11:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6263/ SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6263 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6263 appeared first on CVE Vulnerability.

]]>