EUVD-2009-4463

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...

CVE-2009-4497

Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...

CVE-2009-4497

The CVE-2009-4497 entry is grounded in LXR Cross Referencer (lxr-cvs) web frontend, where Debian and OpenVAS/NVL references confirm a vulnerability caused by missing input sanitization. The issue enables cross-site scripting (XSS) via crafted input and affects lxr-cvs versions around 0.9.5/0.9.6 ...