Cross site scripting

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Directory traversal

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-2694

CVE-2008-2694 affects phpInv 0.8.0, with a vulnerability in the search.php keyword parameter that enables cross-site scripting (XSS). The root cause is improper handling of user input in the search functionality, allowing an attacker to inject arbitrary web script or HTML when the keyword paramet...

phpinv-lfixss.txt

========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...