EUVD-2007-2304

Malware in sbrugna...

EUVD-2007-2303

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter...

CVE-2007-2309

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2308

CVE-2007-2308 concerns a cross-site scripting (XSS) flaw in FloweRS 2.0, exposed via the rok parameter in cas.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The description and CVE entries consistently reference FloweRS 2.0 and cas.php, with no explicit exp...

CVE-2007-2309

CVE-2007-2309 affects FloweRS 2.0, with a cross-site scripting vulnerability in cas.php exploitable via the den parameter. Remote attackers can inject arbitrary script/HTML. Connected sources confirm the component and parameter but do not provide concrete exploit details, impact beyond XSS, or re...

CVE-2007-2308

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter...