CVE-2006-5169

CVE-2006-5169 is an XSS vulnerability in PowerPortal 1.1 (attributed to John Himmelman/aka DaRk2k1). The connected records specify that remote attackers can inject arbitrary script or HTML via unspecified vectors, possibly related to user registration. There is no explicit exploit code or in-the-...

CVE-2006-5126: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...