EUVD-2009-0599

Malware in sbrugna...

CVE-2009-0594

CVE-2009-0594 affects phpSkelSite 1.4 in the file index.php, where a cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. This is the underlying cause noted in the description. The supplied documents do not specify ...

CVE-2009-0596

CVE-2009-0596 affects phpSkelSite 1.4, specifically the file skysilver/login.tpl.php. The vulnerability stems from directory traversal in the TplSuffix parameter when register_globals is enabled, allowing remote attackers to include and execute arbitrary local files. The entry notes a MEDIUM seve...