3 matches found
CVE-2008-5818
Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...
CVE-2008-2124
SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...