Ezboxx: >> Ezboxx Portal System >> beta_0.7.6 Security Vulnerabilities
Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.
CVSS Score
7.8
EPSS Score
0.005
Published
2007-01-16
SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter.
CVSS Score
7.5
EPSS Score
0.01
Published
2007-01-16