Eva-web : Security Vulnerabilities, CVEs, Published In 2006
An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.
Max CVSS
7.8
EPSS Score
0.43%
Published
2006-05-31
Updated
2008-11-09
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.php3, (2) date parameter in (b) rubrique.php3, and the (3) perso and (4) aide parameters to (c) an unknown script, probably index.php.
Max CVSS
6.8
EPSS Score
1.56%
Published
2006-05-31
Updated
2017-07-20
2 vulnerabilities found