Phpinv Phpinv : Security vulnerabilities, CVEs

Copy

CVE-2008-2695

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.

Max CVSS

7.5

EPSS Score

0.45%

Published

2008-06-13

Updated

2017-09-29

CVE-2008-2694

Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Max CVSS

4.3

EPSS Score

0.20%

Published

2008-06-13

Updated

2017-09-29

2 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!