CVE-2006-2903

CVE-2006-2903 describes a cross-site scripting (XSS) vulnerability in Particle Links 1.2.2, specifically in admin.php where the username parameter can be exploited to inject arbitrary script/HTML. The available references (e.g., NVD entry) list a low severity (CVSS v2 base 2.6) with network attac...

CVE-2006-2904

The CVE-2006-2904 entry describes an SQL injection vulnerability in Partial Links 1.2.2, specifically in index.php and exploitable via the topic parameter. The underlying issue is improper input handling that allows an attacker to inject and execute arbitrary SQL commands on the backend database....

CVE-2006-2902

CVE-2006-2902 describes a directory traversal vulnerability in Particle Links 1.2.2 that could let an attacker access arbitrary files via ".." sequences in an HTTP request. Affected: Particle Links 1.2.2. Cause: path traversal in HTTP requests. Potential impact: partial confidentiality loss (per ...

CVE-2006-2905

Partial Links 1.2.2 is affected. Remote attackers can disclose sensitive information by requesting page_footer.php or page_header.php, which reveals the path in an error message. The provided documents do not specify a fix or workaround.