CVE-2009-1778

CVE-2009-1778 affects BigACE CMS 2.5: SQL injection in the new user registration feature when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the username parameter. The provided documents do not include remediation details (patch/version) or explicit exploita...

CVE-2009-2379

CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...