EUVD-2006-3759

Malware in sbrugna...

CVE-2006-3765: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the "name input" field in newentry.php...

CVE-2006-3765

CVE-2006-3765 pertains to multiple cross-site scripting (XSS) vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier. The affected component is the hwdeGUEST web application, with the issue described as XSS via unspecified vectors, demonstrated specifically by the "name input" fiel...

hwdeGUEST

Product : hwdeGUEST Version : 2.0 WebSite : http://hwde.de Problem : Admin access rus Description: ------------ var.dat: ======== ... //Your username $benutzername="hwde"; //Your password $benutzerpasswort="SOFT"; ... ========= Exploit: -------- http://somehost/guestbook/var.dat Contacts: -------...