Phpaddedit - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2009-04-02.

Products

• Phpaddedit - 2 CVEs

Newest CVEs of Phpaddedit

• CVE-2008-6581 - CVSS 7.5 (high), 2009-04-02: login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter.
• CVE-2008-6313 - CVSS 6.8 (medium), 2009-02-27: Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows remote attackers to include and execute…