CVE-2006-3091: Undefined Security Weakness

PhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the installation path via a direct request to 1 /verif.php, 2 /inc/footer.php, and 3 /remises/ajouterremise.php...

CVE-2006-3092: Undefined Security Weakness

PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters to 1 /tva/ajoutertva.php, 2 /remises/ajouterremise.php, 3 /pays/ajouterpays.php, 4 /pays/modifierpays.php, 5 /produits/ajoutercat.php, 6...