Filtered by vendor Daverave Subscriptions
Filtered by product Link Bank Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-1199 1 Daverave 1 Link Bank 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter.
CVE-2006-1200 1 Daverave 1 Link Bank 2025-04-03 N/A
Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement.