EUVD-2006-1674

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

CVE-2006-1673

Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

CVE-2006-1673

Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

CVE-2006-1673

CVE-2006-1673 affects Dark_Wizard vBug Tracker, specifically the vbugs.php component in version 3.5.1 and earlier. The vulnerability arises from lack of proper input handling in the sortorder parameter, enabling a remote attacker to inject arbitrary web script or HTML (XSS). Exploitation details,...

vBulletin 3.5.x vBug Tracker XSS vuln.

vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...