CVE-2006-1878

CVE-2006-1878 affects phpFaber TopSites: a cross-site scripting (XSS) vulnerability in index.php, exploitable via the page parameter to inject arbitrary web script or HTML. The provided sources describe the vulnerability but do not specify affected product versions, exact root cause beyond unsani...

CVE-2007-2155

CVE-2007-2155 affects phpFaber TopSites 3. A directory traversal vulnerability in template.php (modify parameter in a template action to admin/index.php) allows remote attackers to read arbitrary files via .. traversal. This is a network-accessible issue with low attack complexity and no authenti...