Cupidsystems: Security Vulnerabilities
SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action.
CVSS Score
6.5
EPSS Score
0.009
Published
2009-12-04
Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.
CVSS Score
5.0
EPSS Score
0.015
Published
2005-05-02