CVE-2011-0644

CVE-2011-0644 describes a SQL injection vulnerability in PHPCMS 2008 V2, specifically in the include/admin/model_field.class.php file. The issue can be exploited via the modelid parameter to flash_upload.php, enabling remote attackers to execute arbitrary SQL commands. Connected sources (NVD/NIST...

CVE-2011-0645

CVE-2011-0645 corresponds to a SQL injection in PHPCMS 2008 V2, specifically in data.php via the where_time parameter of a get action, enabling remote arbitrary SQL execution. The vulnerability is due to improper handling of user-supplied input in the query, as reported across multiple sources (N...