Cdg393

**Name of the Vulnerable Software and Affected Versions** A.l-Pifou version 1.8p2 **Description** The issue allows remote attackers to read arbitrary files via ".." sequences in the `ze langue 02` cookie. This can be achieved by using the `choix lng` parameter to `choix langue.php` to indirectly set the cookie, then accessing `livre dor.php` to trigger the inclusion from `inc/change lang ck.php`. There is a possible relationship with `livre livre.php`, as reported by some third-party sources. **Recommendations** For A.l-Pifou version 1.8p2, consider restricting access to the `choix langue.php` and `livre dor.php` scripts until a patch is available. As a temporary workaround, avoid using the `choix lng` parameter in the `choix langue.php` script to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHProg versions prior to 1.1 **Description** The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `lang` parameter of the index.php file. This is a directory traversal vulnerability. **Recommendations** For versions prior to 1.1, update to version 1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php file or validating the `lang` parameter to prevent directory traversal attacks.

**Name of the Vulnerable Software and Affected Versions** PHProg versions prior to 1.1 **Description** The issue is related to a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the `album` parameter in index.php, which is used in an opendir call. Additionally, the same primary issue can be used for full path disclosure with an invalid parameter, revealing the installation path in an error message. **Recommendations** For versions prior to 1.1, update to version 1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php file or validating and sanitizing the `album` parameter to prevent malicious input.

**Name of the Vulnerable Software and Affected Versions** KorviBlog version 1.3.0 **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `prenom`, `emailFrom`, or `body` parameters. **Recommendations** For KorviBlog version 1.3.0, as a temporary workaround, consider restricting the use of the `prenom`, `emailFrom`, and `body` parameters until a patch is available. Avoid using these parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.