CVE-2006-6695

CVE-2006-6695 : XSS in Carsen Klock TextSend 1.5, affected via index.php, vulnerable parameters (1) error and (2) success. This allows remote attackers to inject arbitrary script/HTML. According to NVD, base CVSS v2 score is 6.8 (Medium) with network attack vector, no authentication, and partial ...

CVE-2006-6686

CVE-2006-6686: PHP remote file inclusion in Carsen Klock TextSend 1.5 (sender.php) allows arbitrary PHP code execution via ROOT_PATH URL input. Affected component: TextSend 1.5; root cause is improper handling of ROOT_PATH enabling inclusion of a remote file. Impact per source: partial confidenti...