CVE-2009-4231

CVE-2009-4231 describes a directory traversal in SweetRice (versions 0.5.3 and earlier) affecting as/lib/plugins.php. An attacker can trigger local file inclusion and execution by supplying .. in the plugin parameter, enabling arbitrary local file access and execution. The connected records confi...

CVE-2010-5317

SweetRice CMS (PHP) contains multiple SQL injection vulnerabilities in index.php prior to version 0.6.7.1. The issues allow remote attackers to inject arbitrary SQL via: (1) file_name in an attachment action, (2) post in show_comment, (3) sys-name in rssfeed, and (4) sys-name in view. Exploitatio...