Vulnerabilities (CVE)

Filtered by vendor Brad Fears Subscribe
Filtered by product Phpcodecabinet
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4044 1 Brad Fears 1 Phpcodecabinet 2024-02-04 7.5 HIGH N/A
PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUT_PATH parameter.
CVE-2004-2085 1 Brad Fears 1 Phpcodecabinet 2024-02-04 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.