EUVD-2006-2991

Malware in sbrugna...

CVE-2006-2994

PhazizGuestbook 2.0 is affected by XSS in index.php. The vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through the (1) name, (2) email, (3) url, and (4) text (content) fields. The description from CVE-2006-2994 is consistent across NVD/NIST references. No concrete...

CVE-2006-2994: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, 3 url fields, and 4 text field content parameter...

phazizGuestbook v2.0 - XSS

phazizGuestbook v2.0 Homepage: http://www.devhome.de/englishversion Effected files: input boxes of name, email, url, text. XSS Vulnerability: None of these input boxes sanatize user input before generating it. for PoC put IMG SRC=javascript:alert&00000XSS' in any of the above boxes...