EUVD-2005-4232

Malware in sbrugna...

CVE-2005-4237

CVE-2005-4237 affects MySQL Auction 3.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the search functionality, with parameters in the SearchZoom module (potentially the keyword parameter) allowing remote injection of arbitrary script/HTML. Exploitability and impact are d...

MySQL Auction XSS vuln.

MySQL Auction XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mysql-auction-xss-vuln.html vendor:mysqlauction.com affected version: 3.0 and prior Product Description: Full featured, MySQL database driven online auction software. Features...

CVE-2005-4237: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...