CVE-2009-2154

CVE-2009-2154 describes a SQL injection in Impleo Music Collection 2.0: vulnerable component is admin/login.php, trigger via username when magic_quotes_gpc is disabled. Remote attackers can execute arbitrary SQL commands. CVSS v2 base score 6.8 (MEDIUM). No remediation details are provided in the...

CVE-2009-2153

CVE-2009-2153 affects Impleo Music Collection 2.0 (index.php). The vulnerability is a cross-site scripting (XSS) flaw in the sort parameter, enabling remote attackers to inject arbitrary web script or HTML. No further root-cause details are provided beyond the description; exploitation details ar...