Vulnerabilities

TI-2009-02269 CVE-2009-2379 · GHSA-h9ww-ghm2-rrpv

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote…

LOW 39

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05563 Published 2009-07-08 No fix listed CWE-22

TI-2009-01693 CVE-2009-1778 · GHSA-94f5-7fgr-4q3p

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when…

LOW 32

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01168 Published 2009-05-22 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote…

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when…