Vulnerabilities > Wordsmith

DATE CVE VULNERABILITY TITLE RISK
2007-09-26 CVE-2007-5103 Path Traversal vulnerability in Wordsmith 1.0Rc1
Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a ..
network
wordsmith CWE-22
6.8
2007-09-26 CVE-2007-5102 Code Injection vulnerability in Wordsmith 1.0Rc1
PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the _path parameter.
network
wordsmith CWE-94
6.8