EUVD-2006-1891

Malware in sbrugna...

CVE-2006-1891

Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...

CVE-2006-1891

CVE-2006-1891 describes a cross-site scripting (XSS) vulnerability in Martin Scheffler’s betaboard 0.1. The issue allows remote attackers to inject arbitrary script/HTML through a user’s profile, potentially via the FormVal_profile parameter. The description notes uncertainty whether betaboard is...

CVE-2006-1891: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...

[Full-disclosure] BetaBoard Cross Site Scripting vulnerability

//----- Advisory Program : BetaBoard Homepage : http://gonzo.uni-weimar.de/scheffl2/betaboard/ Tested version : 0.1 Found by : Simon MOREL philemon at thehackademy dot net This advisory : Simon MOREL philemon at thehackademy dot net Discovery date : 2006/04/16 //----- Application description...