EUVD-2008-6571

Malware in sbrugna...

Path traversal

Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full pathname in the file parameter...

CVE-2008-6609

Cross-site scripting XSS vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter...

CVE-2008-6610

CVE-2008-6610 affects Stefan Ott’s phpcksec 0.2.0 via an absolute path traversal in phpcksec.php. An attacker can remote read files and list arbitrary directories by supplying a full pathname in the file parameter. This is the stated vulnerability and impact in multiple sources (CVE/NVD). The ava...

CVE-2008-6609

CVE-2008-6609 describes a cross-site scripting (XSS) vulnerability in the PHP script phpcksec.php of Stefan Ott’s phpcksec 0.2 . The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter. Documented impact is a partial integrity impact with no confidentiality...