EUVD-2005-3995

Malware in sbrugna...

CVE-2005-4000: Undefined Security Weakness

Cross-site scripting XSS vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter...

CVE-2005-4000

CVE-2005-4000 describes a Cross-site scripting (XSS) vulnerability in the SiteBeater News System (archive.asp) ≤ 4.00, exploitable remotely via the sKeywords parameter. The provided sources state that an attacker can inject arbitrary web script or HTML, leading to potential user session or page c...

Sitebeater News System XSS vuln.

Sitebeater News System XSS vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html affected version: 4.00 and prior Product Description: News Features: mailing lists, polls, themes, attachments, search, categories,...