EUVD-2006-4311

Malware in sbrugna...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4324

CityForFree indexcity 1.0 has an XSS vulnerability in add_url2.php exploitable via the url parameter. The underlying issue is insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Affected software/version: indexcity 1.0 (add_url2.php). Impact: client-...

CVE-2006-4323

CVE-2006-4323 involves an SQL injection in CityForFree’s indexcity 1.0 product, specifically the vulnerable script is list.php. The underlying issue occurs when magic_quotes_gpc is disabled, allowing an attacker to inject arbitrary SQL through the cate_id parameter. Connected documents corroborat...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...