Dew-Code Dew-Newphplinks
2 CVEs affecting Dew-Code Dew-Newphplinks. Latest disclosed: 2009-05-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-1624 | | 2009-05-12 | Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter. | |
CVE-2009-1623 | | 2009-05-12 | Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID paramet… |