Vulnerabilities > Spyce > Spyce

DATE CVE VULNERABILITY TITLE RISK
2008-02-25 CVE-2008-0982 Improper Input Validation vulnerability in Spyce 2.1.3
Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message.
network
spyce CWE-20
5.8
2008-02-25 CVE-2008-0981 Path Traversal vulnerability in Spyce 2.1.3
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
network
low complexity
spyce CWE-22
6.4
2008-02-25 CVE-2008-0980 Cross-Site Scripting vulnerability in Spyce 2.1.3
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy.
network
spyce CWE-79
4.3