CVE-2006-3106

CVE-2006-3106 describes a cross-site scripting (XSS) vulnerability in index.php of phpMyDesktop|Arcade 1.0 . The flaw is triggered by the subsite parameter in the subsite todo feature, enabling remote attackers to inject arbitrary web script or HTML. The public reports indicate an XSS risk with a...

CVE-2006-2747

CVE-2006-2747 affects PhpMyDesktop|arcade 1.0 FINAL. A directory-traversal in index.php via the showsubsite todo parameter (.. + trailing null %00) can read arbitrary files and may allow PHP code execution. Exploit details, affected versions, and remediation are not provided in the connected docu...