EUVD-2012-1237

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter...

CVE-2012-1211

CVE-2012-1211: XSS in Powie pFile 1.02 via pfile/kommentar.php (filecat parameter). Affected component: Powie pFile 1.02; vulnerability described as cross-site scripting, enabling remote script/HTML injection. CVSS v2 base score 4.3 (Medium) with network attack vector, no authentication, partial ...

PT-2012-3134

Name of the Vulnerable Software and Affected Versions pFile version 1.02 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the filecat parameter in the kommentar.php file. This could potentially lead to unauthorized actions o...

CVE-2012-1211: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter...