EUVD-2009-3876

Malware in sbrugna...

EUVD-2009-3872

Malware in sbrugna...

CVE-2009-3901

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to 1 Wizardtracking.asp, 2 wizardoe2.asp, 3 your-register.asp, 4 main-whyregister.asp, and 5 your.asp in home/, and other unspecified vectors...

CVE-2009-3901

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

CVE-2009-3901

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

CVE-2009-3905

CVE-2009-3905 concerns XSS in the e-Courier CMS. The vulnerability arises from unsafely handling the UserGUID parameter in multiple pages: Wizard_tracking.asp, wizard_oe2.asp, your-register.asp, main-whyregister.asp, and your.asp in home/, plus unspecified vectors. Public details from NVD/NVD-der...

CVE-2009-3901

The CVE-2009-3901 entry documents multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS. The flaws allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other vectors. CVSS notes a medium base score (4.3) with no confidential...

CVE-2009-3901: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

CVE-2009-3905: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to 1 Wizardtracking.asp, 2 wizardoe2.asp, 3 your-register.asp, 4 main-whyregister.asp, and 5 your.asp in home/, and other unspecified vectors...

e-Courier CMS Cross Site Scripting

Vendor: e-Courier http://www.ecouriersoftware.com/ Product: CMS Tracking Site Issue: Cross-Site Scripting. Description: Nearly all pages include the URI Parameter UserGUID, which is not sanitized before being included in the response. Example:...

e-Courier CMS - UserGUID Multiple Cross-Site Scripting Vulnerabilities

e-Courier CMS - UserGUID Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41970/info e-Courier CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

e-Courier CMS - 'UserGUID' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41970/info e-Courier CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...