CVE-2008-2073

CVE-2008-2073 describes a directory traversal vulnerability in the file include/global.inc.php of Virtual Design Studio vlbook 1.21 . The underlying issue allows an attacker to supply a value for the parameter l containing “..” to cause the application to include and execute arbitrary local files...

Unfixed XSS vulnerability at www.royaldesignstudio.com

Security researcher AKINCILAR, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting www.royaldesignstudio.com, which at the time of submission ranked 466074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. I...