CVE-2008-6955

mxCamArchive 2.2 exposes sensitive information under the web root due to insufficient access control, allowing remote attackers to obtain configuration details and passwords via a direct request to archive/config.ini. The connected sources confirm the vulnerability and its impact but do not provi...

CVE-2008-6956

CVE-2008-6956 affects mxCamArchive 2.2 in the admin/admin.php component. It is a static code injection vulnerability that allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, with execution triggered by index.php. The C...