CVE-2006-4260

Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...

CVE-2006-4260

Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. dot dot in the path parameter...

CVE-2006-4259

Fotopholder 1.8 contains a cross-site scripting (XSS) flaw in index.php that allows an attacker to inject arbitrary script or HTML via the path parameter. The vulnerability is noted as potentially stemming from a directory traversal issue. Affected software: Fotopholder 1.8 (index.php). Consequen...

CVE-2006-4260

Fotopholder 1.8 is affected by a directory traversal in index.php, allowing remote attackers to read arbitrary directories or files via a .. in the path parameter. The root cause is insufficient sanitization/verification of the path input. Impact is partial confidentiality (read access only). No ...

CVE-2006-4259

Cross-site scripting XSS vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability...