|
Description
|
|
Multiple vulnerabilities have been identified in N.T., which could be exploited by remote attackers to execute arbitrary commands and scripting code.
The first issue is due to an input validation error in the "index.php" script that does not validate the "username" variable before being logged and displayed via the "Login Log" page, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser in the security context of an affected Web site.
The second flaw is due to input validation errors in the "index.php" script that fails to properly validate certain variables before being written to the "ticker.db.php" file, which could be exploited by malicious administrators to execute arbitrary PHP commands.
|
