Vulnerabilities > PHP S3 > PHP I Board > 1.1

DATE CVE VULNERABILITY TITLE RISK
2009-06-26 CVE-2009-2222 Path Traversal vulnerability in PHP.S3 PHP-I-Board 1.0/1.1
Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail.
network
low complexity
php-s3 CWE-22
5.0
2009-06-26 CVE-2009-2221 Cross-Site Scripting vulnerability in PHP.S3 PHP-I-Board 1.0/1.1
Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
php-s3 CWE-79
4.3