EUVD-2007-0150

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...

CVE-2007-0146

The CVE-2007-0146 entry concerns multiple XSS vulnerabilities in Fix and Chips CMS 1.0. The flaws allow remote attackers to inject arbitrary web script or HTML through several input points: the id parameter in delete-announce.php; the Announcement field in staff.php; and various fields in new_cus...