Tinymuw@0.1.0 Security Vulnerabilities and Issues — Tinymuw@0.1.0 CVE List

Lucene search

L0j1kTinymuw0.1.0

2 matches found

CVE•added 2006/06/12 8:6 p.m.•38 views

CVE-2006-2969

Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations.

4.3CVSS5.8AI score0.00558EPSS

CVE•added 2006/06/12 8:6 p.m.•37 views

CVE-2006-2970

videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter, probably with an invalid value, which reveals the path in an error message.

5CVSS6.1AI score0.00404EPSS