EUVD-2005-3291

Malware in sbrugna...

EUVD-2006-5272

Malware in sbrugna...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

CVE-2006-5287

Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via 1 the User-Agent HTTP header, or the 2 gbentrytext, 3 gblocation, 4 gbfullname, or 5 gbsex parameters...

CVE-2006-5287

CVE-2006-5287 affects Xeobook 0.93 in sign.php, where multiple SQL injection flaws exist. Remote attackers could exploit the following inputs to inject SQL: the User-Agent HTTP header and the parameters gb_entry_text, gb_location, gb_fullname, and gb_sex. The vulnerability permits arbitrary SQL c...

CVE-2006-5287

Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via 1 the User-Agent HTTP header, or the 2 gbentrytext, 3 gblocation, 4 gbfullname, or 5 gbsex parameters...

Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory: Xeobook = 0.93 Multiple SQL Injection Vulnerabilities Release Date: 10/12/2006 Last Modified: 10/12/2006 Author: Tamriel tamriel at gmx dot net Application: Xeobook = 0.93 Risk: Moderate Vendor Status: not contacted Vendor Site:...

[Full-disclosure] Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory: Xeobook = 0.93 Multiple SQL Injection Vulnerabilities Release Date: 10/12/2006 Last Modified: 10/12/2006 Author: Tamriel tamriel at gmx dot net Application: Xeobook = 0.93 Risk: Moderate Vendor Status: not contacted Vendor Site:...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

CVE-2005-3292

Affected software: Xeobook 0.93. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities enabling remote attackers to inject arbitrary web script or HTML via Javascript events in tags such as . Impact: script execution in the victim’s browser; no exploit details are provided in the doc...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

[SA17159] Xeobook Guestbook Script Insertion Vulnerability

TITLE: Xeobook Guestbook Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17159 VERIFY ADVISORY: http://secunia.com/advisories/17159/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Xeobook 0.x http://secunia.com/product/5846/ DESCRIPTION: rjonesx has...