EUVD-2008-6607

Malware in sbrugna...

CVE-2008-6645

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

Cross site scripting

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

CVE-2008-6645

Opencosmo VisualSentinel 0.7 contains an XSS vulnerability when processing the User-Agent header ($_SERVER['HTTP_USER_AGENT']), which is displayed in log files. This could allow injection of arbitrary script/HTML. The NVD reports CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided...

CVE-2008-6645

Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...

visualsentinel-cas.txt

VisualSentinel 0.7 Cross Agent Scripting Discovered by: Alfredo Panzera, Opencosmo Security Software vendor: http://www.opencosmo.com Date: 31-05-2008 Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log th...

VisualSentinel 0.7 Cross Agent Scripting Vulnerability

VisualSentinel 0.7 Cross Agent Scripting Discovered by: Alfredo Panzera, Opencosmo Security Software vendor: http://www.opencosmo.com Date: 31-05-2008 Vulnerability: The vulnerability consists on inject javascript code falsify the user agent's attacker during an attack and then save in the log th...