CVE-2007-1232

SQLiteManager 1.2.0 is affected by a Local File Include due to improper sanitization of the SQLiteManager_currentTheme cookie, which is used to include include/config.inc.php. The flaw allows an unauthenticated, remote attacker to read arbitrary files or execute PHP code on the remote host (subje...

CVE-2008-0516

CVE-2008-0516 affects SQLiteManager 1.2.0 via a PHP remote file inclusion in spaw/dialogs/confirm.php. The vulnerability stems from unsanitized input in the spaw_root parameter, enabling an attacker to include a remote URL and execute arbitrary PHP code on the server. Reported impact is remote co...