Filtered by vendor Ixprim Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-6756 1 Ixprim 1 Ixprim Cms 2024-11-21 N/A
The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack.
CVE-2006-6755 1 Ixprim 1 Ixprim Cms 2024-11-21 N/A
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message.
CVE-2006-6754 1 Ixprim 1 Ixprim Cms 2024-11-21 N/A
Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the story_id parameter to ixm_ixpnews.php, and unspecified other vectors.