EUVD-2007-4788

Malware in sbrugna...

Cross-site Scripting (XSS)

httpserver is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization on staticPath, allowing XSS payloads to be stored in filenames or directory names...

CVE-2007-4807: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...