VYPR

Saturncms

by Infireal

CVEs (2)

  • CVE-2008-6263Feb 24, 2009
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function. NOTE: some of these details are obtained from third party information.

  • CVE-2008-6262Feb 24, 2009
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.