CVE-2006-2488

Multiple cross-site scripting XSS vulnerabilities in Spymac WebOS WOS 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 delfolder, 2 nick, or 3 action parameters to a notes/index.php, 4 curr parameter to b ipod/getipod.php, and in c login.php...

CVE-2004-2488

The CVE-2004-2488 entry concerns Nexgen FTP Server prior to version 2.2.3.23. It describes a directory traversal vulnerability that allows remote authenticated users to read or list arbitrary files through “C:” sequences in the RETR, NLST, LIST, RNFR, and RNTO FTP commands. Affected software: Nex...

CVE-2005-2488

Cross-site scripting XSS vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via 1 the strRootpath parameter to validsession.php or 2 the strTable parameter to Admin/News/List.php...

CVE-2005-2488

The CVE-2005-2488 entry describes a Cross-site scripting (XSS) vulnerability in Web Content Management News System. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/Li...