5 matches found
CVE-2008-5628
SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter...
CVE-2008-5628
CVE-2008-5628 corresponds to an SQL injection in index.php of CMS little 0.0.1, enabling remote attackers to execute arbitrary SQL commands via the term parameter. Affected component: index.php in CMS little 0.0.1. Root cause: unsafeguarded SQL construction through user-supplied term parameter. R...
Directory traversal
Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. dot dot in the template parameter...
CVE-2008-3036
CVE-2008-3036 affects CMS little 0.0.1 via a directory traversal in index.php. The template parameter’s .. path allows remote attackers to include and execute arbitrary local files, and possibly remote files. Documented impact is remote code execution through file inclusion. Root cause: insuffici...
CVE-2008-3036
Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. dot dot in the template parameter...