Xentraz: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.
CVSS Score
6.8
EPSS Score
0.005
Published
2007-01-18
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.
CVSS Score
7.5
EPSS Score
0.008
Published
2007-01-18