EUVD-2006-6339

Malware in sbrugna...

CVE-2006-6356

The CVE-2006-6356 entry covers multiple XSS vulnerabilities in PHPNews 1.3.0, specifically in templates/link_temp.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying one of several parameters (url, id, subject, username, time). The root cause is input handli...

PHPNews 1.3.0 XSS

PHP Script: PHPNews 1.3.0 Class: XSS Website: http://newsphp.sourceforge.net Found by: Detefix dork: inurl:phpnews ----- - Vulnerable Code: ?php printEOT a href="$url?action=fullnewsshowcomments=1id=$id"$subject/a by $username on $timebr / ----- - Exploits:...