CVE-2007-5113

CVE-2007-5113 affects Google Urchin 5 (<= 5.7.03) where report.cgi allows remote attackers to bypass authentication and access sensitive information (web server logs) by modifying query parameters such as profile, rid, prefs, n, vid, bd, ed, dt, and gtype. The vulnerability is related to an au...

CVE-2007-5112

Cross-site scripting XSS vulnerability in session.cgi aka the login page in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOTE: this can be leveraged to capture login credential...

CVE-2007-5112

CVE-2007-5112 is an XSS vulnerability in Google Urchin 5 (versions up to 5.7.03 and earlier) affecting the session.cgi (login page). The weakness allows remote attackers to inject arbitrary script/HTML via the query string, as described in the NVD entry. The impact noted includes potential creden...

Google Urchin password theft madness

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a trivially exploitable XSS vul on Google Urchin Web Analytics 5's login page. The vulnerability has been tested on versions 5.6.00r2, v5.7.01, 5.7.02 and 5.7.03 latest. Previous versions are most likely to be affected as well. I know that...

Urchin 5.7.x - session.cgi Cross-Site Scripting

Urchin 5.7.x - session.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/25788/info Urchin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Urchin 5.7.x - 'session.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25788/info Urchin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Urchin Multiple XSS vuln.

Urchin Multiple XSS vuln. Vuln. discovered by : r0t Date: 1 September 2007 vendor:www.roirevolution.com/urchin/ orginal advisory: http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html affected versions:tested on Urchin v5.6.00r2 other versions also can be affected. Urchin...

CVE-2007-4713

Multiple cross-site scripting XSS vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the 1 dtc, 2 vid, 3 n, 4 dt, 5 ed, and 6 bd parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the 1 dtc, 2 vid, 3 n, 4 dt, 5 ed, and 6 bd parameters...

CVE-2007-4713

Multiple cross-site scripting XSS vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the 1 dtc, 2 vid, 3 n, 4 dt, 5 ed, and 6 bd parameters...

CVE-2007-4713

CVE-2007-4713 describes multiple cross-site scripting (XSS) vulnerabilities in Urchin 5.6.00r2, specifically in urchin.cgi, allowing remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters. The connected documents confirm the ...