CVE-2006-5626

CVE-2006-5626 affects phpFaber CMS prior to 1.3.36, specifically the file cms_images/js/htmlarea/htmlarea.php. The underlying issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML, likely via arbitrary parameters in the query strin...

CVE-2009-4382

CVE-2009-4382 affects phpFaber CMS, likely in module.php, where user-supplied mod parameter enables cross-site scripting (XSS). Public records indicate PHPFaber CMS 1.3.36 is vulnerable; root cause is insufficient sanitization of input, allowing arbitrary script/HTML injection. The vulnerability ...