2532gigs: >> 2532gigs >> 1.2.1 Security Vulnerabilities
2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via a direct request to backup.php, which creates backup.sql under the web root with insufficient access control.
CVSS Score
4.0
EPSS Score
0.015
Published
2009-02-20
Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
CVSS Score
7.5
EPSS Score
0.062
Published
2007-08-29