10 matches found
EUVD-2003-0489
Malware in sbrugna...
LedNews 0.7 Post Script Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities. script...
CVE-2003-0495
Cross-site scripting XSS vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item...
CVE-2003-0495
The CVE-2003-0495 entry concerns LedNews 0.7 with a cross-site scripting (XSS) flaw that lets an attacker inject arbitrary web script via a news item. The vulnerability is described as enabling the execution of malicious HTML/JavaScript in victims’ browsers, potentially enabling cookie theft or o...
CVE-2003-0495
Cross-site scripting XSS vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item...
XSS Vulnerability in LedNews (CGI/Perl) v0.7
XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...
lednews.txt
XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...
LedNews News Post XSS
The remote web server is running LedNews, a set of scripts designed to help maintain a news-based website. There is a flaw in some versions of LedNews that could allow an attacker to include rogue HTML code in the news, which may in turn be used to steal the cookies of people visiting this site, ...
LedNews 0.7 Post Script - Code Injection
LedNews 0.7 Post Script - Code Injection source: https://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities...
LedNews 0.7 Post Script - Code Injection
source: https://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities...