CVE-2009-1846

CVE-2009-1846 affects SiteX (versions up to 0.7.4 Build 418) with multiple local file inclusion vulnerabilities via the THEME_FOLDER parameter in themes/, enabling an attacker to include/execute arbitrary local files (directories: Corporate, Fusion, Joombo, Streamline, Structure homepage.php). Th...

CVE-2010-1343

CVE-2010-1343 concerns a SQL injection in SiteX 0.7.4 beta, affecting the photo.php script via the albumid parameter. The underlying issue is unsanitized input incorporated into a database query, enabling remote attackers to manipulate queries and potentially access sensitive data. Public sources...