EUVD-2006-1081

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

CVE-2006-1077

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

CVE-2006-1077

Evo-Dev evoBlog is affected by multiple cross-site scripting (XSS) vulnerabilities in the commentary feature. The issue allows remote attackers to inject arbitrary web script or HTML through the name parameter and other unspecified parameters. The reports indicate an XSS risk without specifying a...

evoBlogXSS.txt

DESCRIPTION evoBlog is prone to HTML injection attacks. It is possible for a malicious evoBlog user to inject hostile HTML and script code into the commentary via form fields. This code may be rendered in the browser of a web user who views the commentary of evoBlog. evoBlog does not adequately...

evoBlog Remote Name tag Script injection

DESCRIPTION evoBlog is prone to HTML injection attacks. It is possible for a malicious evoBlog user to inject hostile HTML and script code into the commentary via form fields. This code may be rendered in the browser of a web user who views the commentary of evoBlog. evoBlog does not adequately...