Vulnerabilities (CVE)

Filtered by vendor Blanknberg Subscribe
Filtered by product Blanknberg
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-1581 1 Blanknberg 1 Blanknberg 2024-02-04 6.4 MEDIUM N/A
Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the _path parameter.
CVE-2006-1582 1 Blanknberg 1 Blanknberg 2024-02-04 5.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter. NOTE: this might be resultant from the directory traversal issue.