EUVD-2009-2918

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2009-2930

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2009-2930

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2009-2930

CVE-2009-2930 is an XSS vulnerability in elka CMS (aka Elkapax), affecting the Search feature. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI. According to NVD, the exploitability vector is Network with Medium complexity and no auth...