CVE-2008-5591

CVE-2008-5591 describes a Cross-site scripting (XSS) vulnerability in login.asp of Nightfall Personal Diary 1.0, allowing remote attackers to inject arbitrary web script or HTML via the username parameter (and possibly other login fields). The affected component is the login page (login.asp) and ...

CVE-2008-5592

CVE-2008-5592 affects Nightfall Personal Diary 1.0. The issue is improper access control: sensitive data is stored under the web root, allowing remote attackers to download the database file (users-zza21.mdb) via a direct request. The resulting impact is partial confidentiality loss. The availabl...