EUVD-2015-5954

Malware in sbrugna...

CVE-2015-6011: Undefined Security Weakness

Web Reference Database aka refbase through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via 1 the id parameter to unapi.php or 2 the stylesheet parameter to sru.php...

PT-2015-7114

Name of the Vulnerable Software and Affected Versions Web Reference Database aka refbase versions prior to 0.9.6 and bleeding-edge versions prior to 2015-01-08 Description The issue allows remote attackers to conduct XML injection attacks. This can be achieved via two parameters: the id parameter...