EUVD-2006-2556

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-2556

Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-2557

PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal TRanx rebuilded, allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...

CVE-2006-2556

Technical details for CVE-2006-2556 are not publicly provided in the supplied documents. No concrete information on affected products, versions, impact, or fixes is available here. Monitor for updates.

Newsportal <= 0.36 Remote File Inclusion Vulnerability

Newsportal = 0.36 Remote File Inclusion Vulnerability + Affected Software: Newsportal = 0.36 + registerglobals=on + Vendor: http://florian-amrhein.de/newsportal + Contact. [email protected] + Vuln discovered by: Florian Amrhein + PoC by: Philipp Niedziela // CODE...