EUVD-2014-2913

Malware in sbrugna...

EUVD-2008-4710

Malware in sbrugna...

CVE-2014-2890

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

Cross site scripting

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

CVE-2014-2890

The CVE-2014-2890 entry affects phpMyID 0.9. The XSS vulnerability is in the wrap_html function of MyID.php, exploitable via the openid_error parameter to MyID.config.php when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or HTML; the issue stems from im...

PT-2014-4949

Name of the Vulnerable Software and Affected Versions phpMyID version 0.9 Description A cross-site scripting XSS issue exists due to improper handling of the openid error parameter in error messages when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or...

CVE-2014-2890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

CVE-2008-4730

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4730

The CVE-2008-4730 entry describes a Cross-site scripting (XSS) vulnerability in phpMyID 0.9, specifically in MyID.php, where the openid_trust_root parameter and an inconsistent openid_return_to parameter are not properly sanitized in an error message. This allows remote attackers to inject arbitr...

CVE-2008-4730

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4730: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

XSS vulnerability in phpMyID

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: XSS vulnerability in phpMyID Credits: Raphael Geissert [email protected] Release date: 2008-10-27 Affects: v0.9 23-Jul-2008 Resources: Homepage: http://siege.org/projects/phpMyID/ Demo: http://phpmyid.com Background: phpMyID is a single user...

phpMyID can act as a redirector and as headers injector

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: phpMyID can act as a redirector and as headers injector Credits: Raphael Geissert [email protected] Release date: 2008-10-27 Affects: v0.9 23-Jul-2008 Resources: Homepage: http://siege.org/projects/phpMyID/ Demo: http://phpmyid.com Background...