EUVD-2007-1121

Malware in sbrugna...

EUVD-2007-1122

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web script or HTML via the f parameter...

CVE-2007-1124

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2007-1125

Cross-site scripting XSS vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web script or HTML via the f parameter...

Directory traversal

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2007-1125

Cross-site scripting XSS vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web script or HTML via the f parameter...

CVE-2007-1124

CVE-2007-1124 affects the XeroXer Simple one-file gallery. It is a directory traversal vulnerability in gallery.php, exploitable by supplying a .. in the f parameter to read arbitrary files. The connected records confirm the affected product and the root cause is improper path handling in the f p...

CVE-2007-1125

CVE-2007-1125 describes a cross-site scripting (XSS) vulnerability in gallery.php of XeroXer Simple one-file gallery, exploitable via the f parameter to inject arbitrary script/HTML. Connected sources confirm the issue and its basic impact (client-side script injection) but do not provide explici...

CVE-2007-1124

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2007-1124: Undefined Security Weakness

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2007-1125: Undefined Security Weakness

Cross-site scripting XSS vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web script or HTML via the f parameter...