EUVD-2008-0219

Malware in sbrugna...

Default credentials

PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the showpage and time parameters to the default URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prot, 2 host, 3 path, 4 name, 5 ext, 6 size, 7 searchdays, or 8 showpage parameter to the default URI...

CVE-2008-0199

PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the showpage and time parameters to the default URI...

CVE-2008-0207

CVE-2008-0207 affects PRO-Search 0.17 and earlier, which contains multiple reflected XSS vulnerabilities in the default URI. The payloads can be injected through the query parameters: prot, host, path, name, ext, size, search_days, and show_page, enabling remote script or HTML execution in a user...