RSS   Vulnerabilities for 'Phppowercards'   RSS

2009-12-30
 
CVE-2009-4469

CWE-79
 

 
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) archiv parameter, and the (3) subcat parameter.

 


Copyright 2024, cxsecurity.com

 

Back to Top