Vendor/product archive

aprox / aproxengine CVEs

Beta · best-effort

2 CVEs tagged to aprox / aproxengine — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to aprox vendor archive

CVE-2008-3291

Published Jul 24, 2008

SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-2895

Published Jun 27, 2008

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1