Xentraz

Liens Dynamiques

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
Exploit
  • EPSS 0.8%
  • Published 18.01.2007 02:28:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.

Exploit
  • EPSS 1.05%
  • Published 18.01.2007 02:28:00
  • Last modified 09.04.2025 00:30:58

(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.