CVE-2006-2632

CVE-2006-2632 is an XSS vulnerability in Andrew Godwin ByteHoard 2.1 and earlier. The issue allows remote authenticated users to inject arbitrary web script or HTML via file descriptions. The connected documents confirm the affected software/component and the root cause (client-side script inject...

CVE-2006-2633

The CVE-2006-2633 entry describes an absolute path traversal in ByteHoard 2.1 and earlier, where the copy action in index.php can be exploited by remote authenticated users to create or overwrite files in other users’ directories by supplying the absolute directory path in infolder and the filena...

CVE-2006-2849

Summary: CVE-2006-2849 is a PHP remote file inclusion vulnerability affecting Bytehoard 2.1 Epsilon/Delta. The flaw resides in includes/webdav/server.php and is triggered by a crafted value in the bhconfig[bhfilepath] parameter, allowing an attacker to execute arbitrary PHP code remotely. The pro...