You_You

**Name of the Vulnerable Software and Affected Versions** QuickBlogger (QB) version 1.4 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `page` parameter in the acc.php file. **Recommendations** For QuickBlogger (QB) version 1.4, consider restricting access to the acc.php file or validating and sanitizing the `page` parameter to prevent remote file inclusion attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DanPHPSupport versions prior to 1.0 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via the `page` parameter in "index.php" or the `do` parameter in "admin.php". This can lead to cross-site scripting (XSS) attacks. **Recommendations** For versions prior to 1.0, update to version 1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "index.php" and "admin.php" files to minimize the risk of exploitation. Avoid using the `page` parameter in "index.php" and the `do` parameter in "admin.php" until the issue is resolved.