Vulnerabilities > Brad Fears

DATE CVE VULNERABILITY TITLE RISK
2006-08-09 CVE-2006-4044 Remote File Include vulnerability in PHPCodeCabinet Core.PHP
PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUT_PATH parameter.
network
low complexity
brad-fears
7.5
2004-02-04 CVE-2004-2085 HTML Injection vulnerability in Brad Fears PHPCodeCabinet comments.php
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.
network
brad-fears
4.3