CVE-2007-3120: Undefined Security Weakness

Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5832: Undefined Security Weakness

All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...