Webbiscuits Modules Controller vulnerabilities

• webbiscuits modules controller Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules... CVE-2008-6139 Public exploit 5.0 MediumFebruary 14, 2009
• webbiscuits modules controller PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1... CVE-2008-6138 Public exploit 7.5 HighFebruary 14, 2009