← Back

Mxcamarchive

mxcamarchive

Vendor: Infireal • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6956
1Infireal
1Mxcamarchive
Apr 23, 2026
Aug 12, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is execu...Show more
Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-6955
1Infireal
1Mxcamarchive
Apr 23, 2026
Aug 12, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.