EUVD-2009-1449

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-1451

The CVE-2009-1451 entry describes a Cross-site Scripting (XSS) vulnerability in SMA-DB 0.3.12, specifically in startpage.php, where an attacker can inject arbitrary web script or HTML via PATH_INFO. Affected software: SMA-DB 0.3.12; vulnerable component: startpage.php; root cause: unsanitized PAT...

CVE-2009-1451: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

SMA-DB 0.3.12 RFI / XSS

-----------------:Remote File Include/cross site script:----------------- script:SMA-DB v0.3.12 ------------------------------------------------------------------ download from:http://bluevirus.ch/media/downloads/SMA-DBv0.3.12.zip ------------------------------------------------------------------...