CVE-2007-3386.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-3386: XSS in Host Manager Severity: Low Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: 6.0.0 to 6.0.13 5.5.0 to 5.5.24 Description: The Host Manager Servlet does not filter user supplied data before display. Th...

CVE-2006-3386

CVE-2006-3386 affects Vincent Leclercq News 5.2. The vulnerability arises in index.php where a mail[] parameter with invalid values can cause disclosure of sensitive information (e.g., installation path). The incident is documented across NVD/CVE records; connected documents do not specify affect...

CVE-2006-3386

index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail parameter with invalid values...