EUVD-2006-2253

Malware in sbrugna...

CVE-2006-2252

Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Cross site scripting

Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2006-2252

CVE-2006-2252 describes a cross-site scripting vulnerability in OpenFAQ 0.4.0’s submit.php, exploitable via the q parameter to inject arbitrary script/HTML. The issue arises from insufficient input validation in the submit handler, enabling an attacker to deliver script to a victim’s browser. Aff...

CVE-2006-2252

Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

OpenFAQ - HTML injection and XSS (Cross Site Scripting)

Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...

OpenFAQ 0.4 - 'Validate.php' HTML Injection

source: https://www.securityfocus.com/bid/17860/info OpenFAQ is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context...

openfaq040XSS.txt

Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...

OpenFAQ 0.4 - Validate.php HTML Injection

OpenFAQ 0.4 - Validate.php HTML Injection source: https://www.securityfocus.com/bid/17860/info OpenFAQ is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...