Ecardmax.com: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
CVSS Score
4.3
EPSS Score
0.013
Published
2009-10-08
Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter.
CVSS Score
6.8
EPSS Score
0.151
Published
2007-04-10
Cross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score
4.3
EPSS Score
0.004
Published
2006-01-05