Vulnerabilities

TI-2009-03062 CVE-2009-3217 · GHSA-prcv-xr7q-82jv

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers…

LOW 35

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00947 Published 2009-09-16 No fix listed CWE-89

TI-2009-03061 CVE-2009-3216 · GHSA-wrwm-4qrx-hh9h

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is…

LOW 24

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02289 Published 2009-09-16 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers…

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is…