CVE-2009-3599

CVE-2009-3599 is an XSS vulnerability in HUBScript 1.0 affecting single_winner1.php, exploitable via the bid_id parameter. The weakness allows remote attackers to inject arbitrary web script/HTML. Public references in the sources (Secunia, OSVDB, Packet Storm, X-Force) confirm the issue but do no...

CVE-2009-3599: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in singlewinner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bidid parameter...