CVE-2007-2021

CVE-2007-2021: Multiple PHP remote file inclusion flaws in Pineapple Technologies Lore 1 permit remote code execution via crafted URLs in the lang_path parameter of third_party/phpmailer/class.phpmailer.php or the get_plugin_file_path parameter of third_party/smarty/libs/plugins/function.html_che...

CVE-2006-2836

CVE-2006-2836 describes a SQL injection vulnerability in Pineapple Technologies Lore, affecting version 1.5.6 and earlier. The flaw resides in comment.php and allows remote attackers to execute arbitrary SQL commands via the article_id parameter. The confirmed impact is partial confidentiality, i...

CVE-2005-3988

CVE-2005-3988 affects Pineapple Technologies Lore 1.5.4; the vulnerability is an SQL injection in article.php via the id parameter. This allows remote command execution against the database. The provided sources (e.g., NVD) confirm the vulnerability and its high impact (CVSS v2 base score 7.5, wi...