35 matches found
EUVD-2008-0988
Malware in sbrugna...
EUVD-2008-0989
Malware in sbrugna...
EUVD-2008-0987
Malware in sbrugna...
Spyce 2.1.3 spyce/examples/getpost.spy Name Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Spyce 2.1.3 spyce/examples/formtag.spy Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Spyce 2.1.3 docs/examples/handlervalidate.spy x Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Spyce 2.1.3 spyce/examples/automaton.spy Direct Request Error Message Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Spyce 2.1.3 docs/examples/redirect.spy Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Spyce 2.1.3 spyce/examples/request.spy name Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the...
Information disclosure
Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...
CVE-2008-0982
Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message...
Open redirect
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2008-0980
Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...
CVE-2008-0981
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2008-0981
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2008-0980
CVE-2008-0980 affects Spyce – Python Server Pages (PSP) 2.1.3. The vulnerability set consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML by supplying crafted input to various parameters in Spyce examples and demos (e.g., url/typ...
CVE-2008-0980
Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...
CVE-2008-0982
Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message...
CVE-2008-0982
Spyce (Python Server Pages) PSP 2.1.3 is affected by an information disclosure vulnerability: a direct request to spyce/examples/automaton.spy can reveal the file path in an error message, enabling partial confidentiality impact. The issue is documented in CVE-2008-0982 across multiple sources (N...