Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 repertimage parameter to utilisateurs/vousetesbannis.php, the 2 elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php, and the 3...

CVE-2007-5306: Improper Limitation of a Pathname to a Restricted Directory

ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information full path via unspecified vectors to utilisateurs/votesresultats.php...