CVE-2006-2326

The CVE describes a directory traversal vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. The flaw allows remote attackers to read arbitrary files via traversal sequences in the read parameter, leading to partial confidentiality impact. Affected component: ...

CVE-2006-2325: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2006-2326: Undefined Security Weakness

Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2006-2325

CVE-2006-2325 describes a cross-site scripting (XSS) vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. It allows remote attackers to inject arbitrary web script or HTML via the read parameter, with the note that the issue might originate from directory trav...