EUVD-2009-3921

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...

CVE-2009-3950

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...

CVE-2009-3950

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...

CVE-2009-3950

Bractus SunTrack is affected by CVE-2009-3950, which has multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML through input fields across several pages: the title parameter in newprofile.html; the firstname, lastname, and company parameters in sig...

Bractus SunTrack Multiple XSS

Vendor: Bractus http://bract.us Product: SunTrack http://bract.us/demo/login.jsp Multiple stored XSS vulnerabilities exist in the Bractus SunTrack courier software suite. Affected scripts: newprofile.html title parameter signup/signup.html firstname, lastname, company parameter contact.html...