CVE-2009-0401

CVE-2009-0401 describes an SQL injection in browsecats.php of E-Php CMS, exploitable by remote attackers via the cid parameter to execute arbitrary SQL. The affected component is the browsecats.php module within E-Php CMS; root cause is improper input handling that allows SQL command injection. I...

CVE-2008-4142

CVE-2008-4142 is a SQL injection vulnerability in E-Php CMS affecting article.php via the es_id parameter, allowing remote attackers to execute arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH). The provided documents describe the vulnerability and its existence but do not detail a workaround or...