CVE-2005-0253

Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the databasename parameter...

CVE-2005-0253

CVE-2005-0253 affects BibORB, specifically 1.3.2 and earlier. A directory traversal flaw in index.php (database_name parameter) allows remote attackers with Delete action rights to delete arbitrary files on the host where BibORB runs. Related disclosures (Full-Disclosure advisory, PacketStorm not...

CVE-2005-0251

BibORB is affected by a cross-site scripting (XSS) vulnerability in bibindex.php, affecting BibORB 1.3.2 and possibly earlier versions. The issue allows remote attackers to inject arbitrary HTML/script via the search parameter, enabling client-side execution when viewing data. Public reports (e.g...