CVE-2008-6609

CVE-2008-6609 describes a cross-site scripting (XSS) vulnerability in the PHP script phpcksec.php of Stefan Ott’s phpcksec 0.2 . The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter. Documented impact is a partial integrity impact with no confidentiality...

CVE-2008-6610

CVE-2008-6610 affects Stefan Ott’s phpcksec 0.2.0 via an absolute path traversal in phpcksec.php. An attacker can remote read files and list arbitrary directories by supplying a full pathname in the file parameter. This is the stated vulnerability and impact in multiple sources (CVE/NVD). The ava...