EUVD-2007-4880

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

CVE-2007-4899

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...

CVE-2007-4899

Boinc Forum 5.10.20 and earlier contains multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via (1) id in forum_forum.php or (2) search_string in forum_text_search_action.php for both titles and bodies searches. Affected product: Boinc Forum versions up to 5.10.20. The sou...

CVE-2007-4899

Multiple cross-site scripting XSS vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to forumforum.php, or the searchstring parameter to forumtextsearchaction.php in a 2 titles or 3 bodies search...