Dir2web - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2012-08-12.

Products

• Dir2web - 2 CVEs

Newest CVEs of Dir2web

• CVE-2012-4069 - CVSS 5 (medium), 2012-08-12: Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a…
• CVE-2012-4070 - CVSS 7.5 (high), 2012-08-12: SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a…