Nixieaffiliate

nixieaffiliate

Vendor: Idevspot • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-4895 1Idevspot 1Nixieaffiliate Apr 16, 2026 Sep 19, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
CVE-2006-4894 1Idevspot 1Nixieaffiliate Apr 16, 2026 Sep 19, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.