EUVD-2006-4248

Malware in sbrugna...

EUVD-2006-4247

Malware in sbrugna...

[SA21648] Fotopholder "path" Cross-Site Scripting Vulnerability

TITLE: Fotopholder "path" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA21648 VERIFY ADVISORY: http://secunia.com/advisories/21648/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Fotopholder 2.x http://secunia.com/product/11731/ DESCRIPTION: Vampire...

CVE-2006-4259

Cross-site scripting XSS vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability...

CVE-2006-4260

Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...

CVE-2006-4259

Fotopholder 1.8 contains a cross-site scripting (XSS) flaw in index.php that allows an attacker to inject arbitrary script or HTML via the path parameter. The vulnerability is noted as potentially stemming from a directory traversal issue. Affected software: Fotopholder 1.8 (index.php). Consequen...

CVE-2006-4260

Fotopholder 1.8 is affected by a directory traversal in index.php, allowing remote attackers to read arbitrary directories or files via a .. in the path parameter. The root cause is insufficient sanitization/verification of the path input. Impact is partial confidentiality (read access only). No ...

CVE-2006-4260

Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...

CVE-2006-4259

Cross-site scripting XSS vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability...