Jake Olefsky Fotopholder
2 CVEs affecting Jake Olefsky Fotopholder. Latest disclosed: 2006-08-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-4260 | | 2006-08-21 | Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. (dot dot) in the path… | |
CVE-2006-4259 | | 2006-08-21 | Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter… |