EUVD-2002-1989

Malware in sbrugna...

CVE-2002-2010

Cross-site scripting XSS vulnerability in htsearch.cgi in htdig ht://Dig 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

Unfixed XSS vulnerability at www.ndsu.edu

Security researcher fallingmidget, has submitted on 24/02/2008 a cross-site-scripting XSS vulnerability affecting www.ndsu.edu, which at the time of submission ranked 94950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It is...

Unfixed XSS vulnerability at www.harrassowitz.de

Security researcher Stacker, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.harrassowitz.de, which at the time of submission ranked 2347922 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

CVE-2002-2010

CVE-2002-2010: The htsearch.cgi component of ht://Dig (htdig) versions 3.1.5, 3.1.6, and 3.2 is vulnerable to cross-site scripting (XSS) via the words parameter. An attacker can supply crafted input in the words parameter to cause arbitrary web script or HTML to be injected and executed in a vict...

CVE-2002-2010

Cross-site scripting XSS vulnerability in htsearch.cgi in htdig ht://Dig 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2002-2010: Undefined Security Weakness

Cross-site scripting XSS vulnerability in htsearch.cgi in htdig ht://Dig 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

ht://Dig htsearch.cgi config Parameter XSS

The remote host is running a version of ht://Dig which is vulnerable to an unspecified cross-site scripting attack. An attacker can exploit this flaw to steal information from unsuspecting users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

ht://Dig htsearch.cgi words Parameter XSS

The 'htsearch' CGI, which is part of the ht://Dig package, is vulnerable to cross-site scripting attacks, through the 'words' variable. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2002-2010

Cross-site scripting XSS vulnerability in htsearch.cgi in htdig ht://Dig 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...