EUVD-2014-2987

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...

CVE-2014-2965

CVE-2014-2965 is a reflected XSS in SpamTitan’s management interface, affecting auth-settings-x.php prior to version 6.04. The vulnerability allows an attacker to inject arbitrary script via the sortdir parameter, executing in a user’s browser context. SpamTitan addressed this with a 6.04 patch; ...

PT-2014-4987

Name of the Vulnerable Software and Affected Versions SpamTitan versions prior to 6.04 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter in the auth-settings-x.php file. Recommendations For versions prior to 6.04,...

CVE-2014-2965: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...