Vulnerabilities > Apphp > PHP Microcms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-09-22 | CVE-2010-3481 | SQL Injection vulnerability in Apphp PHP Microcms 1.0.1 Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) password variables, possibly related to include/classes/Login.php. | 6.8 |
| 2010-09-22 | CVE-2010-3480 | Path Traversal vulnerability in Apphp PHP Microcms 1.0.1 Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. | 6.8 |