CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0335

CVE-2005-0335 describes a directory traversal vulnerability in EMotion MediaPartner Web Server 5.0. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the URL, taking advantage of improper input handling in the web server’s URL processing. Affected software is EM...