EUVD-2006-2813

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the 1 op and 2 nick parameters, and possibly the 3 0000, 4 userinfo, 5 compder, 6 encuestas, and 7 pagina parameters. NOTE: it is not clear whether...

CVE-2006-2816

CVE-2006-2816 describes multiple XSS vulnerabilities in index.php of CoolPHP Magazine. The issue affects the web application’s index.php and is exploitable via the (1) op and (2) nick parameters, and possibly (3) 0000, (4) userinfo, (5) comp_der, (6) encuestas, and (7) pagina parameters. The note...

CVE-2006-2816: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the 1 op and 2 nick parameters, and possibly the 3 0000, 4 userinfo, 5 compder, 6 encuestas, and 7 pagina parameters. NOTE: it is not clear whether...

RE: Multiple Xss exploits in coolphp magazine

Subject: Multiple Xss exploits in coolphp magazine Date: 27 May 2006 14:25:31 -0000 Multiple Xss exploits in coolphp magazine script type : coolphp magazine bug found by : black-code & sweet-devil team : site-down type : Xss Codes : http://www.xxx.com/coolphp/index.php?op='scriptalert10/script...