EUVD-2005-4224

Malware in sbrugna...

EveryAuction 1.53 Auction.PL Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15824/info EveryAuction is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to run arbitrary script code in the browser of an...

EveryAuction 1.53 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + EveryAuction 1.53 Remote Xss Vulnerability + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz, Sheiry, Shimik Root aka Str0zen,...

CVE-2005-4229

The CVE-2005-4229 entry concerns EveryAuction before or at version 1.53, focusing on the auction.pl component. The vulnerability is an XSS flaw that allows a remote attacker to inject arbitrary web script or HTML through the searchstring parameter. The description notes that the provenance is unk...

CVE-2005-4229: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and...

[SA18016] EveryAuction "searchstring" Cross-Site Scripting Vulnerability

TITLE: EveryAuction "searchstring" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18016 VERIFY ADVISORY: http://secunia.com/advisories/18016/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: EveryAuction 1.x http://secunia.com/product/6482/ DESCRIPTION:...

EveryAuction 1.53 - Auction.pl Cross-Site Scripting

EveryAuction 1.53 - Auction.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/15824/info EveryAuction is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to run arbitrary script code in the...