Phpinv - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2008-06-13.

Products

• Phpinv - 2 CVEs

Newest CVEs of Phpinv

• CVE-2008-2695 - CVSS 7.5 (high), 2008-06-13: Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the…
• CVE-2008-2694 - CVSS 4.3 (medium), 2008-06-13: Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.