Researchers
Back
Sk0L
Researcher from
SEC-CONSULT
#23735
of 60,574
12.5
Total CVSS
Vulnerabilities
·
2
Medium
1
High
1
PT-2005-2807
2005-06-02
5.0
CVE-2005-1840
Phpcms
Phpcms
A directory traversal issue exists, allowing remote attackers to read or include arbitrary files. This can be achieved by using a .. (dot dot) in the `language` parameter to "parser.php".
PT-2005-2832
2005-06-02
7.5
CVE-2005-1875
Exhibit Engine
Exhibit Engine
The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerable parameters are `search row`, `sort row`, `order`, and `perpage`.