EUVD-2007-4812

Malware in sbrugna...

CVE-2007-4831

CVE-2007-4831 affects TorrentTrader 1.07; vulnerable component is account_settings.php. Two XSS vectors are confirmed via the avatar and title parameters, caused by unsanitized user input that can inject arbitrary script/HTML in the browser. Exploitation details beyond the high-level description ...