Infinity Script@2.0.5 Security Vulnerabilities and Issues — Infinity Script@2.0.5 CVE List

Lucene search

DimofinfInfinity Script2.0.5

2 matches found

CVE•added 2009/09/16 5:30 p.m.•40 views

CVE-2009-3211

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the options[style_dir] parameter to the default URI.

6.8CVSS6.7AI score0.00908EPSS

CVE•added 2009/09/16 5:30 p.m.•28 views

CVE-2009-3212

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field.

6.8CVSS8.4AI score0.00298EPSS