EUVD-2005-4478

Malware in sbrugna...

CVE-2005-4483

Cross-site scripting XSS vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

CVE-2005-4485

Multiple cross-site scripting XSS vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp, 2 searchemployees.asp, 3 cat.asp, and 4 links.asp; 5 projectid parameter to pmprojects.asp, 6 retpage parameter...

CVE-2005-4484: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 retpage parameter to login.asp or the 2 dosearch and 3 search parameters to content.asp...

CVE-2005-4483: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

CVE-2005-4482: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

CVE-2005-4485: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp, 2 searchemployees.asp, 3 cat.asp, and 4 links.asp; 5 projectid parameter to pmprojects.asp, 6 retpage parameter...

SiteEnable XSS vuln.

SiteEnable XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/siteenable-xss-vuln.html vendor:http://www.siteenable.com/ affected version:3.3 and prior Product Description: SiteEnable is an open source Web application that combines content...