EUVD-2006-1769

Malware in sbrugna...

EUVD-2006-1903

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML 1 via the referer parameter in sendMail, and via attributes of 2 the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE...

CVE-2006-1903

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML 1 via the referer parameter in sendMail, and via attributes of 2 the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE...

CVE-2006-1903

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML 1 via the referer parameter in sendMail, and via attributes of 2 the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE...

CVE-2006-1903

CVE-2006-1903 concerns multiple XSS vulnerabilities in UserLand Manila (9.5 and earlier). The affected surface is Manila’s web interface edited with the editInBrowser module, allowing remote attackers to inject arbitrary script or HTML via (1) the referer parameter in sendMail, and (2) attributes...

CVE-2006-1769

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...

CVE-2006-1769

CVE-2006-1769 affects UserLand Manila 9.5 and earlier, with XSS vulnerabilities that let remote attackers inject arbitrary script via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$. The connected records also indicate overlap with CVE-2006-1903, which describe...

CVE-2006-1769

Multiple cross-site scripting XSS vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the mode parameter in msgReader$1 and 2 the end of the URI in viewDepartment$...