Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Infireal Subscribe
Filtered by product Mxcamarchive
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-6955 1 Infireal 1 Mxcamarchive 2017-09-28 7.5 HIGH N/A
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.
CVE-2008-6956 1 Infireal 1 Mxcamarchive 2017-09-28 6.5 MEDIUM N/A
Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.