CVE-2015-2953

CVE-2015-2953 affects Igreks MilkyStep Light 0.94 and earlier and MilkyStep Professional 1.82 and earlier. The user-information management functionality allows remote attackers to bypass access restrictions and read files via unspecified vectors. This vulnerability is corroborated by CNVD/NVD ent...

CVE-2015-2958

The CVE-2015-2958 entry concerns Igreks MilkyStep Light (0.94 and earlier) and MilkyStep Professional (1.82 and earlier), where remote attackers could bypass access restrictions and modify administrator credentials via unspecified vectors. This vulnerability is distinct from CVE-2015-2952 and CVE...