CVE-2006-4895

The CVE-2006-4895 issue affects IDevSpot NexieAffiliate 1.9 and earlier. Affected component/entry point is delete.php, where a modified id parameter enables remote attackers to delete arbitrary affiliates. This describes an input manipulation vulnerability that permits unauthorized modification/d...

CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...