EUVD-2008-4710

Malware in sbrugna...

EUVD-2014-2913

Malware in sbrugna...

CVE-2014-2890

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

Cross site scripting

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

CVE-2014-2890

The CVE-2014-2890 entry affects phpMyID 0.9. The XSS vulnerability is in the wrap_html function of MyID.php, exploitable via the openid_error parameter to MyID.config.php when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or HTML; the issue stems from im...

Cross site scripting

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4730

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4730

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4730

The CVE-2008-4730 entry describes a Cross-site scripting (XSS) vulnerability in phpMyID 0.9, specifically in MyID.php, where the openid_trust_root parameter and an inconsistent openid_return_to parameter are not properly sanitized in an error message. This allows remote attackers to inject arbitr...

XSS vulnerability in phpMyID

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: XSS vulnerability in phpMyID Credits: Raphael Geissert [email protected] Release date: 2008-10-27 Affects: v0.9 23-Jul-2008 Resources: Homepage: http://siege.org/projects/phpMyID/ Demo: http://phpmyid.com Background: phpMyID is a single user...

phpMyID can act as a redirector and as headers injector

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: phpMyID can act as a redirector and as headers injector Credits: Raphael Geissert [email protected] Release date: 2008-10-27 Affects: v0.9 23-Jul-2008 Resources: Homepage: http://siege.org/projects/phpMyID/ Demo: http://phpmyid.com Background...