EUVD-2006-5045

Malware in sbrugna...

AudioShare Cross-Site Scripting Vulnerability

AudioShare is an audio file manager. The AudioShare forgot.php script fails to properly handle the 'email' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions whe...

CVE-2006-5060: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode...