PT-2025-42718

Name of the Vulnerable Software and Affected Versions e107 CMS versions prior to 2.3.3 Description A path traversal issue exists in e107 CMS. The issue is located in the Avatar Handler component, specifically within the file /e107 admin/image.php?mode=main&action=avatar. Manipulation of the...

CVE-2006-5108: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...