Unfixed XSS vulnerability at autosport.aeiou.pt

Security researcher Juza, has submitted on 13/02/2010 a cross-site-scripting XSS vulnerability affecting autosport.aeiou.pt, which at the time of submission ranked 6570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...

CVE-2008-6570

CVE-2008-6570 describes an XSS vulnerability in Cybozu Garoon’s RSS reader (versions 2.0.0–2.1.3). A crafted RSS feed could inject arbitrary JavaScript/HTML, potentially executing in the victim’s browser. Root cause: insufficient sanitization/unescaped content in RSS feed handling. Impact is user...

CVE-2008-6570

Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...

CVE-2007-6570

CVE-2007-6570 describes a Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server’s View URL Database functionality. Affected software versions are Sun Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11. The vulnerability allows remote attackers to inject arbitrary web...

CVE-2006-6570

CVE-2006-6570 describes an unrestricted file upload in upload.php of GenesisTrader 1.0. The vulnerability allows remote authenticated users to upload arbitrary files through unspecified vectors, possibly involving form.php and the ajoutfich “foap” action. The available sources indicate a high-sev...