Watersweb Shops Shop Kit Plus
2 CVEs affecting Watersweb Shops Shop Kit Plus. Latest disclosed: 2007-02-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-1128 | | 2007-02-27 | shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=01 query string or (2) enc/stylecss.php w… | |
CVE-2007-1127 | | 2007-02-27 | Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. (dot dot) in the changetheme para… |