EUVD-2008-0212

Malware in sbrugna...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. RotaBanner: crossite scripting...

New vulnerabilities in RotaBanner

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting уязвимостях в баннерной системе RotaBanner. XSS IE: Уязвимости в файле send-password.html в параметрах drop и page. http://site/send-password.html?drop=''style='xss:expressionalertdocument.cookie'&action-send=true...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0200

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0200

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0200

CVE-2008-0200: Multiple cross-site scripting (XSS) in account/index.html of RotaBanner Local 3 and earlier. Vulnerable parameters are (1) user and (2) drop; remote attackers can inject arbitrary script/HTML. Documents do not provide exploit details or specific mitigations.

Rotabanner Local 2/3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27138/info Rotabanner Local is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Rotabanner: crossite scripting...

Vulnerabilities in RotaBanner

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в баннерной системе RotaBanner. Уязвимости в файле index.html в параметрах user и drop. XSS: http://site/account/index.html?user=3Cscript3Ealertdocument.cookie3C/script3E...