EUVD-2008-0212

Malware in sbrugna...

CVE-2008-0200

CVE-2008-0200: Multiple cross-site scripting (XSS) in account/index.html of RotaBanner Local 3 and earlier. Vulnerable parameters are (1) user and (2) drop; remote attackers can inject arbitrary script/HTML. Documents do not provide exploit details or specific mitigations.

CVE-2008-0200

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

Rotabanner Local 2/3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27138/info Rotabanner Local is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...