CVE-2006-2850

The CVE-2006-2850 entry concerns a cross-site scripting (XSS) vulnerability in recentchanges.php of PHP Labware LabWiki 1.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the help parameter. Affected software is LabWiki (Labware) versions up to 1.0, with ...

CVE-2006-2968

CVE-2006-2968 affects PHP Labware LabWiki 1.0. The vulnerability is in search.php where the query parameter used by the search input box can be exploited to inject arbitrary web script/HTML (XS S). Root cause: improper input handling in the search parameter. Impact: remote attacker could execute ...