CVE-2008-4352

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

Sql injection

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

CVE-2008-4351

CVE-2008-4351 affects phpSmartCom 0.2, where index.php is vulnerable to directory traversal via a .. in the p parameter, allowing remote inclusion and execution of arbitrary files. Impact is reflected as partial confidentiality, integrity, and availability (CVSSv2 base 7.5, HIGH). Exploitation de...