EUVD-2006-1965

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 onuser, 2 pass, 3 chatsys, 4 room, 5 username, and 6 to parameters in a sendim.cgi; the 7 username parameter in b imessage.cgi; the...

CVE-2006-1965

CVE-2006-1965 affects aasi media Net Clubs Pro versions 4.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters in various CGI scripts: (a) sendim.cgi (parameters onuser, pass, chatsys, room,...