EUVD-2006-6163

Malware in sbrugna...

CVE-2006-6180: Undefined Security Weakness

Cross-site scripting XSS vulnerability in articles.asp in Expinion.net iNews Publisher iNP 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the hl parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-0590: Undefined Security Weakness

MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...