EUVD-2006-3921

Malware in sbrugna...

PHP Pro Bid 5.2.4 auctionsearch.php advsrc Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...

CVE-2006-3927

CVE-2006-3927 is an XSS vulnerability in PhpProBid 5.24, exploitable via the advsrc parameter in auctionsearch.php. The connected records confirm the affected software/version and the vulnerable parameter, but there are no published remediation details in the provided documents. The exploitation ...

CVE-2006-3927: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter...

Phpprobid <= 5.24 XSS SQL injection Vulnerability

Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="scriptalert/EllipsisSecurityTest//script http://target.xx/auctionsearch.php?start=1&advsrc="scriptalert/EllipsisSecurityTest//script...