EUVD-2007-0517

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web script or HTML via the recipient field...

CVE-2007-0519

The CVE-2007-0519 entry describes a Cross-site scripting (XSS) vulnerability in memcp.php of XMB U2U Instant Messenger, allowing remote authenticated users to inject arbitrary web script or HTML via the recipient field. The consolidated sources confirm the affected component (memcp.php) and the e...

XMB "U2U Instant Messenger" Cross-Site Scripting

Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...