Eric Fichot Downfile
2 CVEs affecting Eric Fichot Downfile. Latest disclosed: 2005-09-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-2819 | | 2005-09-07 | DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php. | |
CVE-2005-2818 | | 2005-09-07 | Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter to (1) email.php,(… |