CVE-2008-1958

CVE-2008-1958 affects Tr Script News 2.1, where an unrestricted file upload in the ajout_cat mode of admin/main.php allows remote authenticated users to execute arbitrary PHP code by uploading a file with a .php extension. For this entry, the vulnerability description is supported by multiple con...

CVE-2008-1957

CVE-2008-1957 describes an SQL injection vulnerability in Tr Script News 2.1, specifically in news.php where the nb parameter in voir mode can be manipulated to execute arbitrary SQL commands. The affected component is the news.php handler of Tr Script News 2.1. The current documents indicate rem...