Facile Interactive Web : Security Vulnerabilities, CVEs, CVSS score >= 6
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao. NOTE: vectors 2 and 3 might be resultant from file inclusion issues.
Max CVSS
6.8
EPSS Score
16.26%
Published
2006-06-01
Updated
2018-10-18
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.
Max CVSS
7.5
EPSS Score
8.10%
Published
2006-06-01
Updated
2018-10-18
2 vulnerabilities found