EUVD-2010-4710

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

CVE-2010-4745 is an XSS vulnerability in PHPXref (nav.html) prior to version 0.7.1, where an attacker could inject script/HTML via the query string. Affected component: PHPXref navigation page; root cause: lack of input sanitization on query parameters. Impact stated: cross-site scripting; no exp...

CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2011-1695

Name of the Vulnerable Software and Affected Versions PHPXref versions prior to 0.7.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the query string, which can lead to cross-site scripting XSS attacks. This occurs due to a vulnerability in the nav.html...

PHPXref 0.7 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting and Remote HTML Include vulnerabilities in PHPXref. ------------------------- Affected products: ------------------------- Vulnerable are PHPXref 0.7 and previous versions. In version PHPXref 0.7.1 the developer fixed these vulnerabilities...

PHPXref 0.7 - nav.html Cross-Site Scripting

PHPXref 0.7 - nav.html Cross-Site Scripting source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code ...

PHPXref 0.7 - 'nav.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in th...

Уязвимости в PHPXref

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Remote HTML Include уязвимостях в PHPXref. XSS RXI WASC-08: http://site/nav.html?javascript:alertdocument.cookie RHI WASC-12: http://site/nav.html?http://websecurity.com.ua Уязвимы PHPXref 0.7 и предыдущие версии. В версии...