EUVD-2006-2556

Malware in sbrugna...

CVE-2006-2556

Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-2556

Technical details for CVE-2006-2556 are not publicly provided in the supplied documents. No concrete information on affected products, versions, impact, or fixes is available here. Monitor for updates.

CVE-2006-2557

PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal TRanx rebuilded, allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...

Newsportal <= 0.36 Remote File Inclusion Vulnerability

Newsportal = 0.36 Remote File Inclusion Vulnerability + Affected Software: Newsportal = 0.36 + registerglobals=on + Vendor: http://florian-amrhein.de/newsportal + Contact. [email protected] + Vuln discovered by: Florian Amrhein + PoC by: Philipp Niedziela // CODE...