EUVD-2006-3128

Malware in sbrugna...

CVE-2006-3131: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the 1 newsarchive, 2 language, and 3 intranetLogin parameters in a index.php; the 4 sitesid parameter in b sites.php; and the 5 newsid parameter in c newsmore.php...