EUVD-2012-2920

Malware in sbrugna...

CVE-2012-2941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter...

PT-2012-4382

Name of the Vulnerable Software and Affected Versions Yandex.Server 2010 version 9.0 Enterprise Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the text parameter in the search functionality. Recommendatio...