VYPR

Phpskelsite

by Phpskelsite

CVEs (2)

  • CVE-2009-0595Feb 16, 2009
    risk 0.04cvss epss 0.12

    PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.

  • CVE-2009-0596Feb 16, 2009
    risk 0.03cvss epss 0.04

    Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter.