EUVD-2007-5276

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 db, 2 pagesize, 3 sort, 4 strKeyWords, and 5 table parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-5296

Multiple cross-site scripting XSS vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 db, 2 pagesize, 3 sort, 4 strKeyWords, and 5 table parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-5296

Multiple cross-site scripting XSS vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 db, 2 pagesize, 3 sort, 4 strKeyWords, and 5 table parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-5296

dbList 8.1 contains multiple XSS vulnerabilities in dblisttest.asp, exploitable via the parameters db, pagesize, sort, strKeyWords, and table. The root cause is not explicitly described beyond generic XSS in the page, and exploitation details (vector, payload, and in-the-wild status) are not prov...

CVE-2007-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the 1 db, 2 pagesize, 3 sort, 4 strKeyWords, and 5 table parameters. NOTE: some of these details are obtained from third party information...