Vulnerabilities

TI-2008-05477 CVE-2008-5771 · GHSA-4jfj-f72q-22fg

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote…

LOW 37

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02299 Published 2008-12-30 No fix listed CWE-22

TI-2008-05476 CVE-2008-5770 · GHSA-gcqp-6x6v-fpm2

Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2…

LOW 25

Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02971 Published 2008-12-30 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote…

Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2…