Vulnerabilities (CVE)

Filtered by vendor Eurologon Subscribe
Filtered by product Eurologon Cms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-6185 1 Eurologon 1 Eurologon Cms 2024-02-28 7.5 HIGH N/A
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a download action, as demonstrated by a certain PHP file containing database credentials.
CVE-2007-6164 1 Eurologon 1 Eurologon Cms 2024-02-28 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) reviews.php, (2) links.php and (3) articles.php.