EUVD-2012-6455

Malware in sbrugna...

CVE-2012-6608

CVE-2012-6608 is a cross-site scripting (XSS) vulnerability in Elastix 2.3.0 affecting xmlservices/E_book.php, exploitable via the Page parameter. The issue is documented across multiple feeds: Elastix 2.3.0 E_book.php XSS (NVD/Red Hat/CVE lists) and OpenVAS summaries. Affected component is the w...

CVE-2012-6608: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...