EUVD-2007-3231

Malware in sbrugna...

PT-2011-2621

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the color parameter to "includes/blogroll.php" or the src parameter to "includes/timwrapper.php"...

CVE-2011-0772: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the 1 color parameter to includes/blogroll.php or 2 src parameter to includes/timwrapper.php...

PivotX 2.2 - pivotxincludesblogroll.php?color Cross-Site Scripting

PivotX 2.2 - pivotxincludesblogroll.php?color Cross-Site Scripting source: https://www.securityfocus.com/bid/45996/info PivotX is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Cross site scripting

Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...

CVE-2007-3241: Undefined Security Weakness

Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...

CVE-2006-3533: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...