Vulnerabilities > Jake Olefsky > Fotopholder > 1.8
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-08-21 | CVE-2006-4260 | Directory Traversal vulnerability in Jake Olefsky Fotopholder 1.8 Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. | 5.0 |
2006-08-21 | CVE-2006-4259 | Cross-Site Scripting vulnerability in Jake Olefsky Fotopholder 1.8 Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. | 2.6 |