EUVD-2006-1203

Malware in sbrugna...

CVE-2006-1199

Cross-site scripting XSS vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter...

CVE-2006-1199

Cross-site scripting XSS vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter...

CVE-2006-1200

Direct static code injection vulnerability in addlink.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the urlname parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement...

CVE-2006-1200

CVE-2006-1200 describes a direct static code injection in the add_link.txt component of the daverave Link Bank, where the url_name parameter is stored in links.txt without sanitization and later used in an include statement. This enables remote attackers to execute arbitrary PHP code and potentia...

CVE-2006-1199

Technical details such as affected products/versions, root cause, and fixes are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2006-1199: Undefined Security Weakness

Cross-site scripting XSS vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter...

CVE-2006-1200: Undefined Security Weakness

Direct static code injection vulnerability in addlink.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the urlname parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement...