EUVD-2008-3491

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI...

CVE-2008-3505

PolyPager 1.0 rc2 and earlier is affected by a Cross‑site Scripting (XSS) vulnerability. The issue arises in the default URI where an attacker can inject arbitrary web script or HTML through the nr parameter. This is documented in CVE-2008-3505/ NVD as an XSS with a base score of 4.3 (Medium) and...

CVE-2008-3506: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands via the nr parameter to the default URI...

CVE-2008-3505: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI...

CVE-2006-5128: Undefined Security Weakness

SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter...