Dew-code - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2009-05-12.

Products

• Dew-newphplinks - 2 CVEs

Newest CVEs of Dew-code

• CVE-2009-1624 - CVSS 5 (medium), 2009-05-12: Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter.
• CVE-2009-1623 - CVSS 4.3 (medium), 2009-05-12: Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID…