2 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter. • http://www.securityfocus.com/archive/1/418518/100/0/threaded •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter. • http://www.securityfocus.com/archive/1/418518/100/0/threaded •