EUVD-2006-0249

Malware in sbrugna...

CVE-2009-4927: Improper Authentication

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Cross site scripting

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241

WBNews 1.1.0 and earlier are affected by a Cross-site scripting vulnerability (CVE-2006-0241) that allows remote attackers to inject arbitrary script or HTML via the Name field. The issue is described in the CVE as a XSS flaw; no further exploit details are provided in the connected documents. Th...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241: Undefined Security Weakness

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

XSS in WBNews < = v1.1.0

it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example scriptalert"Hello DragoN";/script WBNews http://www.webmobo.com/ DragoN [email protected]...