Vulnerabilities > Spyce > Spyce
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-02-25 | CVE-2008-0982 | Improper Input Validation vulnerability in Spyce 2.1.3 Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message. | 5.8 |
2008-02-25 | CVE-2008-0981 | Path Traversal vulnerability in Spyce 2.1.3 Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. | 6.4 |
2008-02-25 | CVE-2008-0980 | Cross-Site Scripting vulnerability in Spyce 2.1.3 Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy. | 4.3 |