3 matches found
CVE-2007-5705
Technical details about CVE-2007-5705 are not publicly available in the provided connected documents; the entry notes remote code execution via settings.inc.php in Jeebles Directory 2.9.60. Monitor for updates.
CVE-2007-5706
CVE-2007-5706 describes an absolute path traversal vulnerability in the download.php of Jeebles Directory 2.9.60. An attacker can read arbitrary files by supplying a full pathname in the query string. The vulnerability is documented across multiple sources and is classified as a high-severity iss...
CVE-2008-1355
CVE-2008-1355 describes a Cross-site scripting (XSS) vulnerability in the Jeebles Directory 2.9.60, specifically in index.php where the attacker can inject arbitrary web script or HTML via the path parameter. The issue is caused by improper handling of the path parameter, allowing remote code exe...