SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
CVSS Score
7.5
EPSS Score
0.013
Published
2004-08-20
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.
CVSS Score
5.0
EPSS Score
0.017
Published
2004-08-20