Vulnerabilities

TI-2008-04955 CVE-2008-5204 · GHSA-4g9r-j6c2-xff9

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when…

LOW 34

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang pa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01846 Published 2008-11-21 No fix listed CWE-22

TI-2008-04954 CVE-2008-5203 · GHSA-72cm-xpfm-5ccr

Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1…

LOW 23

Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the l_vote_done parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-11-21 No fix listed CWE-79

Vulnerabilities

Filters

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when…

Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1…