EUVD-2006-1848

Malware in sbrugna...

CVE-2006-1848

Multiple cross-site scripting XSS vulnerabilities in statsview.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, and 3 date parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in statsview.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, and 3 date parameter...

CVE-2006-1848

LinPHA 1.1.0 is vulnerable to multiple cross-site scripting (XSS) in stats_view.php via the date_from, date_to, and date parameters due to insufficient input sanitization. Remote attackers may inject arbitrary script in the victim’s browser context. Exploit details are evidenced by sources such a...