CVE-2006-2969

CVE-2006-2969 is an XSS vulnerability in the L0j1k tinyMuw 0.1.0 web app. The issue allows remote attackers to inject arbitrary script or HTML by using a javascript: URI in the SRC attribute of an IMG element in the quickchat.php input box (and possibly related areas). The CVSS v2 base score is 4...

CVE-2006-2970

VideoPage.php in L0j1k tinyMuw 0.1.0 is affected by CVE-2006-2970. Remote attackers can obtain sensitive information by supplying a certain id parameter, which causes an error message that reveals the path. The provided documents describe the information-disclosure impact but do not provide root-...