EUVD-2009-2288

Malware in sbrugna...

CVE-2009-2292

Cross-site scripting XSS vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2292

Cross-site scripting XSS vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2292

Appleple a-News 2.32 is affected by a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially executing arbitrary script in a user’s browser. Public entries (NVD, JVN/JVNDb, CVE lists) corroborate the XSS fl...

JVN#42927215 a-News from Appleple vulnerable to cross-site scripting

a-News, a web log system from Appleple, contains a cross-site scripting vulnerability. Note that future releases and maintenance of a-News ended on May 14, 2009. The developer recommends users who wish to continue using a web log system to use a-blog. Impact An arbitrary script may be executed on...