EUVD-2007-3524

Malware in sbrugna...

EUVD-2005-4055

Malware in sbrugna...

RWAuction Pro 4.0 Search.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15740/info The 'rwAuction Pro' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...

CVE-2007-3540

Multiple cross-site scripting XSS vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 show, 3 searchtype, 4 catid, and 5 searchtxt parameters, a different version and vectors than CVE-2005-4060...

CVE-2007-3540

CVE-2007-3540 describes multiple XSS vulnerabilities in rwAuction Pro 4.0/5.0. The flaw is in the search.asp page, exploitable via input parameters including search , show , searchtype , catid , and searchtxt . An attacker could inject arbitrary script/HTML through these inputs, with impact limit...

rwAuction Pro XSS vuln.

rwAuction Pro XSS vuln. Vuln. discovered by : r0t Date: 27 June 2007 vendor:http://www.rainworx.com/ orginal advisory: http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html affected versions:rwAuction Pro v5.0 other versions also can be affected. rwAuction Pro contains a flaw that...

CVE-2005-4060

Cross-site scripting XSS vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter...

CVE-2005-4060

The CVE-2005-4060 entry concerns a Cross-site scripting (XSS) vulnerability in rwAuction Pro 4.0 and 5.0, specifically in the search.asp page where the searchtxt parameter can be used to inject arbitrary web script or HTML. The vulnerability is caused by insufficient input sanitization in the sea...

RWAuction Pro 4.0 - search.asp Cross-Site Scripting

RWAuction Pro 4.0 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15740/info The 'rwAuction Pro' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

RWAuction Pro 4.0 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15740/info The 'rwAuction Pro' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...