Idevspot: >> Nixieaffiliate Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.
CVSS Score
4.3
EPSS Score
0.005
Published
2006-09-19
IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
CVSS Score
7.5
EPSS Score
0.01
Published
2006-09-19