EUVD-2009-4427

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

CVE-2009-4460

CVE-2009-4460 describes cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the rid parameter to index.php, faq.php, and register.php. The provided documents do not specify affected versi...