CVE-2006-4665: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHPSELF variable. NOTE: Some details are obtained from third party information...

CVE-2006-3554

CVE-2006-3554 affects MKPortal 1.0.1 Final and is a directory traversal vulnerability in index.php. The underlying flaw allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the language cookie, demonstrated by injecting PHP sequence...