CVE-2009-3515

CVE-2009-3515 affects d.net CMS, specifically the dnet_admin/index.php component. A directory traversal flaw (via .. in the type parameter) allows remote authenticated administrators to include and execute arbitrary local files. The vulnerability is documented with a CVSSv2 base score of 6.5 (MED...

CVE-2009-3514

Consolidated data for CVE-2009-3514 confirms concrete details: affected software is d.net CMS, with two vulnerable paths. SQL injection could be exploited via the page parameter in index.php, and via the edit_id and _p parameters in dnet_admin/index.php, potentially allowing remote command execut...