Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2006-2214
- EPSS 0.86%
- Published 05.05.2006 12:46:00
- Last modified 03.04.2025 01:03:51
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php. NOTE: this issue has also been reported to affect 1.7.2.
7.5
CVE-2006-0899
- EPSS 18.55%
- Published 27.02.2006 19:06:00
- Last modified 03.04.2025 01:03:51
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.
1