2 matches found
CVE-2007-2713
CVE-2007-2713 relates to ifdate 2.x where an HTTP redirect is sent to the browser but the process does not exit when administrative credentials are missing. This can allow remote attackers to obtain administrative access by requesting the admin/ URI directly. The available connected sources confi...
CVE-2008-7114
CVE-2008-7114 affects iFusion Services iFdate 2.0.3 and earlier. The issue is an SQL injection in members_search.php where the name field can be exploited to execute arbitrary SQL commands. The impact is remote execution of SQL commands with partial confidentiality/integrity/availability impact a...