EUVD-2009-4647

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4682

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4683

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2009-4682

CVE-2009-4682 describes a cross-site scripting (XSS) vulnerability in the vote.php component of the Good/Bad Vote application. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating the id parameter in a vote action. The available connected documents corroborate ...

CVE-2009-4683

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2009-4682

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4683

CVE-2009-4683 is a directory traversal vulnerability in the vote.php component of the Good/Bad Vote product. The flaw allows remote attackers to traverse directories and include/execute arbitrary local files by manipulating the id parameter in a dovote action. The NVD entry notes a partial impact...

CVE-2009-4682: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4683: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...