CVE-2009-3120

CVE-2009-3120 is an XSS vulnerability affecting BIGACE Web CMS 2.6, reachable via public/index.php and the id parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with no confidentiality impact, partial integ...

CVE-2009-2379

CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...