CMSQlite 'index.php' SQL Injection and Directory Traversal Vulnerabilities

CMSQlite is prone to multiple SQL injection and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2095

CVE-2010-2095 corresponds to a SQL injection in CMSQlite, affecting CMSQlite 1.2 and earlier. The vulnerability occurs in index.php via the c parameter, enabling remote SQL command execution. CVSS v2 base score 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and p...