EUVD-2006-0657

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaintresponsetype parameter, which is displayed in a resulting error message, as demonstrated using a...

CVE-2006-0650

CVE-2006-0650 is an XSS vulnerability in the CPAINT library’s cpaint2.inc.php, affecting versions before 2.0.3. The issue allows remote attackers to inject arbitrary script/HTML via the cpaint_response_type parameter, which is reflected in an error message. The documented impact is cross-site scr...

CVE-2006-0650

Cross-site scripting XSS vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaintresponsetype parameter, which is displayed in a resulting error message, as demonstrated using a...