EUVD-2009-3582

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

CVE-2009-3601

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

CVE-2009-3601

Cross-site scripting XSS vulnerability in demopage.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action...

CVE-2009-3601

CVE-2009-3601 is an XSS vulnerability in Scriptsez Ultimate Poll, specifically in demo_page.php where the clr parameter in a vote action can be exploited to inject arbitrary script or HTML. The NVD entry documents a medium base score (CVSS2 4.3) with network attack vector and no confidentiality i...