CVE-2008-2115

CVE-2008-2115 concerns multiple cross-site scripting (XSS) vulnerabilities in editor.php of ScriptsEZ.net Power Editor 2.0. The flaws allow remote attackers to inject arbitrary web script or HTML via the te and dir parameters in a tempedit action. NVD records a base score of 4.3 (MEDIUM) with net...

CVE-2008-2116

CVE-2008-2116 affects ScriptsEZ.net Power Editor 2.0: directory traversal in editor.php allows reading arbitrary local files via a .. sequence in the te and dir parameters of the tempedit action. Root cause is improper input handling of path traversal; impact is partial confidentiality/integrity/...