CVE-2007-5816

The CVE-2007-5816 issue affects CONTENTCustomizer 3.1mp and earlier, where dialog.php allows a remote attacker to obtain sensitive author credentials by issuing an editauthor action and then reading the newlocalpassword input field in the resulting HTML. The underlying cause is exposure of a pass...

CVE-2007-5817

CVE-2007-5817 affects CONTENTCustomizer 3.1mp and earlier. The issue allows remote attackers to perform certain privileged actions via (1) del, (2) delbackup, (3) res, or (4) ren actions, and it can be leveraged to perform cross-site scripting (XSS) and possibly other attacks. Connected sources c...