EUVD-2010-4710

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

CVE-2010-4745 is an XSS vulnerability in PHPXref (nav.html) prior to version 0.7.1, where an attacker could inject script/HTML via the query string. Affected component: PHPXref navigation page; root cause: lack of input sanitization on query parameters. Impact stated: cross-site scripting; no exp...

CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

PHPXref 0.7 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting and Remote HTML Include vulnerabilities in PHPXref. ------------------------- Affected products: ------------------------- Vulnerable are PHPXref 0.7 and previous versions. In version PHPXref 0.7.1 the developer fixed these vulnerabilities...

PHPXref 0.7 - 'nav.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in th...

PHPXref 0.7 - nav.html Cross-Site Scripting

PHPXref 0.7 - nav.html Cross-Site Scripting source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code ...

Уязвимости в PHPXref

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Remote HTML Include уязвимостях в PHPXref. XSS RXI WASC-08: http://site/nav.html?javascript:alertdocument.cookie RHI WASC-12: http://site/nav.html?http://websecurity.com.ua Уязвимы PHPXref 0.7 и предыдущие версии. В версии...