EUVD-2007-5409

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...

CVE-2007-5433

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...

CVE-2007-5433

CVE-2007-5433 describes multiple cross-site scripting (XSS) vulnerabilities in Site-Up 2.64 and earlier within the index.cgi component. The affected vectors are the (1) search and (2) search mask fields, allowing remote attackers to inject arbitrary web script or HTML. The consolidated records al...

CVE-2007-5433: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...

russian-multi.txt

Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...

Vulnerabilities in Site-UP

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Site-UP. XSS: POST запрос на странице http://site/siteuprus/index.cgi: scriptalertdocument.cookie/script В полях: Искать, Укажите маску для поиска. Дополнительная информация о данной уязвимости у меня на сайте:...