EUVD-2007-2260

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...

CVE-2007-2265

Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...

CVE-2007-2265

CVE-2007-2265 is an XSS vulnerability in YA Book 0.98-alpha, exploitable through the City field in a sign action in index.php. The available documents indicate remote script/HTML injection leading to partial confidentiality/integrity/availability impact as described by CVSS metrics, but no patch ...

YA Book Persistent XSS Bug

. . . . | . .| . .;/ || .| .net | .| "YA Book 0.98-alpha - Persistent XSS Vulnerability" by Omni 1 Infos --------- Date : 2007-04-23 Product : YA Book Version : 0.98-alpha - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/yabook - http://www.phpee.com/ Vendor Status ...