EUVD-2011-5085

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in videocomments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

CVE-2011-5185

The CVE-2011-5185 entry describes a Cross-site Scripting (XSS) vulnerability in Online Subtitles Workshop’s video_comments.php (pre-2.0 rev 131). The root cause is unsanitized input in the comment parameter, enabling remote attackers to inject arbitrary web script or HTML. Documented impact per N...

CVE-2011-5185

Cross-site scripting XSS vulnerability in videocomments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...