EUVD-2006-2991

Malware in sbrugna...

CVE-2006-2994

PhazizGuestbook 2.0 is affected by XSS in index.php. The vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through the (1) name, (2) email, (3) url, and (4) text (content) fields. The description from CVE-2006-2994 is consistent across NVD/NIST references. No concrete...

phazizGuestbook v2.0 - XSS

phazizGuestbook v2.0 Homepage: http://www.devhome.de/englishversion Effected files: input boxes of name, email, url, text. XSS Vulnerability: None of these input boxes sanatize user input before generating it. for PoC put IMG SRC=javascript:alert&00000XSS' in any of the above boxes...