EUVD-2007-6268

Malware in sbrugna...

OpenNewsletter 2.5 Compose.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26745/info OpenNewsletter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

CVE-2007-6301

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-6301

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-6301

CVE-2007-6301 describes a cross-site scripting (XSS) vulnerability in the OpenNewsletter project, specifically in compose.php for version 2.5 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value to the type parameter. The available sou...

CVE-2007-6301: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

onl25-xss.txt

Software: OpenNewsletter Homepage: http://www.selfexile.com/projects/opennewsletter Affected version: v2.5 and below Overview: OpenNewsletter si a free, simple, and beautiful open source newsletter solution aimed at small-medium scale. Attack: A non-existant sanitization when parsing the PHP valu...

[XSS] OpenNewsletter v2.5 Multipe XSS Attacks

Software: OpenNewsletter Homepage: http://www.selfexile.com/projects/opennewsletter Affected version: v2.5 and below Overview: OpenNewsletter si a free, simple, and beautiful open source newsletter solution aimed at small-medium scale. Attack: A non-existant sanitization when parsing the PHP valu...

OpenNewsletter 2.5 - 'Compose.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26745/info OpenNewsletter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

OpenNewsletter 2.5 - Compose.php Cross-Site Scripting

OpenNewsletter 2.5 - Compose.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26745/info OpenNewsletter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...