EUVD-2006-2001

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter...

CVE-2006-2000

Cross-site scripting XSS vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter...

CVE-2006-2000

The provided connected sources confirm a concrete vulnerability: Cross-site Scripting (XSS) in logMethods 0.9, specifically in /lms/a2z.jsp, exploitable via the kwd parameter. This is a remote, client-side script injection risk that could allow an attacker to execute arbitrary HTML/JavaScript in ...

logMethods XSS vuln.

logMethods XSS vuln. Vuln. discovered by : r0t Date: 22 april 2006 vendorlink:http://logmethods.com/ affected versions:0.9 and prior orginal advisory:http://pridels.blogspot.com/2006/04/logmethods-xss-vuln.html Vuln. Description: logMethods contains a flaw that allows a remote cross site scriptin...