EUVD-2007-4786

Malware in sbrugna...

Fuzzylime 1.0 Low.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24522/info Fuzzylime is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks ...

CVE-2008-6833

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

CVE-2008-3165

Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...