EUVD-2008-3340

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353

CVE-2008-3353 affects Pure Software Lore, prior to version 1.7.0. The Connected PT-2008-4758 entry documents multiple cross-site scripting (XSS) vulnerabilities in the article comments feature and the search log feature, allowing remote attackers to inject arbitrary web script or HTML. Root cause...

CVE-2008-3353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...