CVE-2008-2076

The CVE-2008-2076 entry concerns ActualAnalyzer Lite 2.78 from ActualScripts. Affected component: admin.php; vulnerability type: Local File Inclusion via the style parameter. Root cause: inadequate sanitization allows a “..” path traversal to include arbitrary local PHP files, enabling remote att...

CVE-2008-2527

CVE-2008-2527 describes a cross-site scripting (XSS) vulnerability in the view.php component of ActualScripts ActualAnalyzer products. Affected versions include ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Li...