EUVD-2006-4350

Malware in sbrugna...

DieselScripts Diesel Paid Mail Getad.PHP

漏洞类型： 输入验证错误 漏洞文件： Getad.PHP 漏洞危害： 攻击者利用该漏洞可以获取用户cookie，从而执行其他攻击行为 解决方案： 厂商没有补丁，推荐使用加速乐: source: http://www.securityfocus.com/bid/19646/info Paid Mail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

CVE-2006-4362

Cross-site scripting XSS vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via the ps parameter...

dieselpaid.txt

NightWarrior nightwarrior-athotmail.com Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/site/getad.php?refid=&email=default&ps=XSS...

CVE-2006-4362

CVE-2006-4362 describes a cross-site scripting (XSS) vulnerability in getad.php of Diesel Paid Mail, enabling remote attackers to inject arbitrary script/HTML via the ps parameter. The NVD entry assigns a base CVSS2 score of 4.3 (Medium) with network attack vector, no confidentiality or availabil...

Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/site/getad.php?refid=&email=default&ps=XSS...