CVE-2009-1821

DMXReady Registration Manager 1.1 is affected. The root cause is insufficient access control that allows remote attackers to access the web root and download the databases/webblogmanager.mdb file, exposing sensitive data. The impact is partial confidentiality loss due to direct access to the data...

CVE-2009-2238

DMXReady Registration Manager 1.1 contains an unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp. An attacker can upload a file with an executable extension and then access it directly under assets/webblogmanager to achieve remote code e...