CVE-2010-3481

CVE-2010-3481 affects ApPHP PHP MicroCMS 1.0.1. It discloses multiple SQL injection vulnerabilities in login.php when magic_quotes_gpc is disabled, allowing remote attackers to potentially execute arbitrary SQL via (1) user_name and (2) password variables, possibly tied to include/classes/Login.p...

CVE-2010-3480

CVE-2010-3480 affects ApPHP PHP MicroCMS 1.0.1. The vulnerability is a directory traversal/local file include in index.php exploitable via a .. in the page parameter when magic_quotes_gpc is disabled, allowing remote inclusion/execution of arbitrary local files in the webserver context. OpenVAS e...