EUVD-2012-1280

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1254

CVE-2012-1254 affects the Segue content management system (Segue 2.2.10.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public materials consistently describe an ability to exec...