EUVD-2006-5272

Malware in sbrugna...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

CVE-2006-5287

Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via 1 the User-Agent HTTP header, or the 2 gbentrytext, 3 gblocation, 4 gbfullname, or 5 gbsex parameters...

CVE-2006-5287

CVE-2006-5287 affects Xeobook 0.93 in sign.php, where multiple SQL injection flaws exist. Remote attackers could exploit the following inputs to inject SQL: the User-Agent HTTP header and the parameters gb_entry_text, gb_location, gb_fullname, and gb_sex. The vulnerability permits arbitrary SQL c...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

CVE-2005-3292

Affected software: Xeobook 0.93. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities enabling remote attackers to inject arbitrary web script or HTML via Javascript events in tags such as . Impact: script execution in the victim’s browser; no exploit details are provided in the doc...