CVE-2006-2160

CVE-2006-2160 describes a cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) that allows remote attackers to inject arbitrary web script or HTML via the username field during registration. The available documents confirm the affected component and the input ve...

CVE-2006-2159

CVE-2006-2159 describes a CRLF injection vulnerability in help.php of Russcom Network Loginphp. The issue allows remote attackers to spoof e-mails and inject MIME headers by crafting CRLF sequences in the email address. According to the NVD entry, the vulnerability is exploitable over the network...