VYPR

Pajax

by Georges Auberger

CVEs (2)

  • CVE-2006-1551Apr 13, 2006
    risk 0.09cvss epss 0.72

    Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters.

  • CVE-2006-1789Apr 13, 2006
    risk 0.00cvss epss 0.00

    Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files via the $className variable.