EUVD-2010-1127

Malware in sbrugna...

CVE-2010-1095

Cross-site scripting XSS vulnerability in loginresetpasswordpage.php in Tracking Requirements & Use Cases TRUC 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2010-1095

CVE-2010-1095 is an XSS vulnerability in TRUC before or at version 0.11.0, affecting login_reset_password_page.php. The vulnerability allows remote attackers to inject arbitrary script or HTML via the error parameter. This information is sourced from multiple feeds (NVD/Red Hat/OpenVAS entries an...

CVE-2010-1095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in loginresetpasswordpage.php in Tracking Requirements & Use Cases TRUC 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-0814: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases TRUC 0.11.0 allows remote attackers to read arbitrary files via a .. dot dot in the uploadfilename parameter...