CVE-2011-5229

Summary of CVE-2011-5229 (appRain CMF): SQL injection in the Forum module’s quickstart/profile/index.php (PATH_INFO) of appRain CMF 0.1.5 can allow remote SQL commands execution. Affected product/version: appRain CMF

CVE-2012-1153

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...