CVE-2008-2073

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-2073

CVE-2008-2073 describes a directory traversal vulnerability in the file include/global.inc.php of Virtual Design Studio vlbook 1.21 . The underlying issue allows an attacker to supply a value for the parameter l containing “..” to cause the application to include and execute arbitrary local files...

CVE-2008-2072

CVE-2008-2072 describes a Cross-site scripting (XSS) vulnerability in index.php of Virtual Design Studio vlbook 1.21, allowing remote attackers to inject arbitrary web script or HTML via the l parameter. The entry notes this is a different vector from CVE-2006-3260, and the affected component is ...

CVE-2008-2072

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

CVE-2008-2073: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-2072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

Unfixed XSS vulnerability at www.royaldesignstudio.com

Security researcher AKINCILAR, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting www.royaldesignstudio.com, which at the time of submission ranked 466074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. I...