CVE-2007-0904

CVE-2007-0904 : SQL injection in LightRO CMS 1.0, exploitable through the ID parameter to index.php in projects.php. The vulnerability stems from improper handling of the ID input, enabling remote attackers to execute arbitrary SQL commands (impact: partial confidentiality/integrity/availability ...

CVE-2007-0824

CVE-2007-0824: A PHP remote file inclusion vulnerability in LightRO CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dateien[news] parameter in inhalt.php. The issue arises from improper handling of user-supplied input that can be included as code, enabling code exec...