CVE-2007-0891

CVE-2007-0891 affects phpMyVisites prior to 2.2. The XSS vulnerability resides in GetCurrentCompletePath in phpmyvisites.php, allowing remote attackers to inject arbitrary script/HTML via the query string. Impact: possible client-side script execution. Remediation: upgrade to version 2.2 or later...

CVE-2007-0892

The CVE-2007-0892 issue affects phpMyVisites prior to 2.2, where a CRLF injection via the url parameter enables HTTP header injection and response splitting when the pagename starts with "FILE:". This is a remote, network-accessible vulnerability in the web frontend that can alter HTTP headers an...

CVE-2005-1324

CVE-2005-1324 affects phpMyVisites via multiple XSS in index.php. The vulnerability allows remote attackers to inject arbitrary scripts/HTML through the (1) part, (2) per, or (3) site parameters. The issue originates from improper handling of user-supplied input in the index.php script, enabling ...

CVE-2007-0893

CVE-2007-0893 affects phpMyVisites prior to version 2.2. A directory traversal flaw lets remote attackers include arbitrary files by supplying leading ".." sequences in the pmv_ck_view cookie parameter, bypassing the protection scheme. This is a straightforward file inclusion risk that can impact...

CVE-2005-1325

CVE-2005-1325 affects phpMyVisites 1.3, where the file set_lang.php processes a mylang parameter in a way that allows remote attackers to read and include arbitrary files. The underlying flaw is the uncontrolled file handling via the mylang input, enabling arbitrary file access/inclusion. Documen...