EUVD-2006-4705

Malware in sbrugna...

CVE-2006-4718

Multiple cross-site scripting XSS vulnerabilities in livreor.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 prenom, 2 emailFrom, or 3 body parameters...

CVE-2006-4718

CVE-2006-4718 affects KorviBlog 1.3.0, where XSS flaws exist in livre_or.php allowing remote injection of arbitrary script/HTML via parameters prenom, emailFrom, or body. The NVD entry documents multiple XSS vulnerabilities with impact on confidentiality, integrity, and availability (partial impa...

[Full-disclosure] KorviBlog - XSS permanent !

Produit : KorviBlog - Langage : PHP - Site web officiel : http://korvi.jdhosts.net/ - Page vulnerable : livreor.php - Faille de securite : Cross Site Scripting Permanent - Explications : Ligne 4 : livreor$POST'prenom', $POST'emailFrom', $POST'body', time; Les variables $POST'prenom' ,...