EUVD-2007-1023

Malware in sbrugna...

EUVD-2006-2203

Malware in sbrugna...

EUVD-2008-1699

Malware in sbrugna...

EUVD-2008-0372

Malware in sbrugna...

EUVD-2010-5023

Malware in sbrugna...

EUVD-2006-5191

Malware in sbrugna...

EUVD-2007-0614

Malware in sbrugna...

EUVD-2009-3804

Malware in sbrugna...

EUVD-2008-2202

Malware in sbrugna...

EUVD-2007-6126

Malware in sbrugna...

EUVD-2007-2420

Malware in sbrugna...

CVE-2010-5059

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via drilldown/CargoAppliedFilter.php. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious input into the artist, album, or position parameters on the...

MediaWiki Cargo Extension Cross-site Scripting vulnerability

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...

PT-2024-2677 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.14 MediaWiki versions 1.36.x through 1.39.x before 1.39.6 MediaWiki versions 1.40.x before 1.40.2 Description: An issue in the Cargo extension of MediaWiki allows for XSS attacks via the artist, album, and...

WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...

CVE-2012-0995

Multiple cross-site scripting XSS vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in an external action to zp-core/admin.php, 2 PATHINTO to an unspecified URL, as demonstrated using /1/, 3 PATHINFO to zp-core/admin.php, or 4...

CVE-2010-5059

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...