EUVD-2013-4544

Malware in sbrugna...

CVE-2013-4691

The CVE-2013-4691 entry documents an XSS vulnerability in Sencha Labs Connect (Node.js HTTP server framework) via the connect.methodOverride() function. The root cause is a lack of proper validation of client-supplied data by the web application, enabling potential execution of client-side code. ...

CVE-2013-4691: Improper Neutralization of Input During Web Page Generation

Sencha Labs Connect has XSS with connect.methodOverride...