EUVD-2006-4032

Malware in sbrugna...

EUVD-2006-4031

Malware in sbrugna...

CVE-2006-4038

Multiple cross-site scripting XSS vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gastname or 2 gastwohnort parameters...

CVE-2006-4038

The CVE-2006-4038 entry applies to GaesteChaos before and including 0.2, where the web application eintragen.php is vulnerable to cross-site scripting. The underlying issue is input handling for the gastname and gastwohnort parameters, which can be crafted to inject arbitrary web script/HTML. The...

CVE-2006-4038: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gastname or 2 gastwohnort parameters...

CVE-2006-4039: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 gastname, 2 gastwohnort, or 3 gasteintrag parameters...