EUVD-2007-4812

Malware in sbrugna...

CVE-2007-4831

CVE-2007-4831 affects TorrentTrader 1.07; vulnerable component is account_settings.php. Two XSS vectors are confirmed via the avatar and title parameters, caused by unsanitized user input that can inject arbitrary script/HTML in the browser. Exploitation details beyond the high-level description ...

CVE-2007-4831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in accountsettings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the 1 avatar and 2 title parameters...