Download-engine (Alexscriptengine) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2007-04-26. Vendor: Alexscriptengine.

CVEs of Download-engine

• CVE-2007-2289 - CVSS 7.5 (high), 2007-04-26: PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated…
• CVE-2007-2255 - CVSS 7.5 (high), 2007-04-25: Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir…