4 matches found
CVE-2007-0904
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter to index.php...
CVE-2007-0904
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter to index.php...
CVE-2007-0904
CVE-2007-0904 : SQL injection in LightRO CMS 1.0, exploitable through the ID parameter to index.php in projects.php. The vulnerability stems from improper handling of the ID input, enabling remote attackers to execute arbitrary SQL commands (impact: partial confidentiality/integrity/availability ...
CVE-2007-0824
CVE-2007-0824: A PHP remote file inclusion vulnerability in LightRO CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dateien[news] parameter in inhalt.php. The issue arises from improper handling of user-supplied input that can be included as code, enabling code exec...