Vulnerabilities

TI-2009-03057 CVE-2009-3212 · GHSA-3cp9-95xq-76hw

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc…

LOW 32

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01019 Published 2009-09-16 No fix listed CWE-89

TI-2009-03056 CVE-2009-3211 · GHSA-7r3c-83p4-h28h

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when…

LOW 34

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01917 Published 2009-09-16 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc…

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when…