EUVD-2008-0212

Malware in sbrugna...

New vulnerabilities in RotaBanner

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting уязвимостях в баннерной системе RotaBanner. XSS IE: Уязвимости в файле send-password.html в параметрах drop и page. http://site/send-password.html?drop=''style='xss:expressionalertdocument.cookie'&action-send=true...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. RotaBanner: crossite scripting...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0200

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0200

CVE-2008-0200: Multiple cross-site scripting (XSS) in account/index.html of RotaBanner Local 3 and earlier. Vulnerable parameters are (1) user and (2) drop; remote attackers can inject arbitrary script/HTML. Documents do not provide exploit details or specific mitigations.

CVE-2008-0200

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

Rotabanner Local 2/3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27138/info Rotabanner Local is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Vulnerabilities in RotaBanner

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в баннерной системе RotaBanner. Уязвимости в файле index.html в параметрах user и drop. XSS: http://site/account/index.html?user=3Cscript3Ealertdocument.cookie3C/script3E...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Rotabanner: crossite scripting...