CVE-2009-3506

CVE-2009-3506 involves multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21. The affected software is CMSphp 0.21, with XSS achievable through the cook_user parameter to index.php and the name parameter to modules.php. The available records describe the underlying issue as improper ...

CVE-2009-3507

CVE-2009-3507 is a vulnerability in CMSphp 0.21 where a directory traversal via the mod_file parameter allows remote attackers to include and execute arbitrary local files using “..”. This is supported by multiple records (NVD, CVE list, PRION, CVELIST) and aligned with the observed CVSSv2 base s...