EUVD-2008-7181

Malware in sbrugna...

CVE-2008-7222: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the ranktitle parameter in a RankForumAdd action...

CVE-2008-6360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attackers to inject arbitrary web script or HTML via the ranktitle parameter. NOTE: some of these details are obtained from third party information...