CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...

CVE-2006-5480

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

CVE-2006-5480

CVE-2006-5480 affects the 2le.net Castor PHP Web Builder 1.1.1. The vulnerability is a PHP remote file inclusion in lib/rs.php that allows a remote attacker to execute arbitrary PHP code by supplying a crafted rootpath parameter. This is a server-side class of flaw that enables code execution thr...

CVE-2026-5480

...

CVE-2026-5480

CVE-2026-5480 is rejected — issued in error; it does not represent an active vulnerability entry.