EUVD-2011-5049

Malware in sbrugna...

CVE-2011-5150

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...

CVE-2011-5150

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...

CVE-2011-5150

CVE-2011-5150 describes multiple XSS vulnerabilities in SpamTitan 5.07 and possibly earlier. The issue allows remote attackers or authenticated users to inject arbitrary JavaScript/HTML via the (1) ipaddress or (2) domain parameter to setup-network.php, representing a different vector from CVE-20...

PT-2012-2127

Name of the Vulnerable Software and Affected Versions SpamTitan versions 5.08 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters to different PHP files, including testaddr or testpass to "auth-settings.php"...

CVE-2011-5150: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...

CVE-2011-5149: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...

PT-2012-2128

Name of the Vulnerable Software and Affected Versions SpamTitan versions 5.07 and earlier Description The issue allows remote attackers or authenticated users to inject arbitrary web script or HTML. This can be achieved via the ipaddress or domain parameter to the "setup-network.php" endpoint...