EUVD-2006-0249

Malware in sbrugna...

Cross site scripting

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2006-0241

WBNews 1.1.0 and earlier are affected by a Cross-site scripting vulnerability (CVE-2006-0241) that allows remote attackers to inject arbitrary script or HTML via the Name field. The issue is described in the CVE as a XSS flaw; no further exploit details are provided in the connected documents. Th...

CVE-2006-0241

Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field...

XSS in WBNews < = v1.1.0

it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example scriptalert"Hello DragoN";/script WBNews http://www.webmobo.com/ DragoN [email protected]...