EUVD-2002-2328

Malware in sbrugna...

CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

CVE-2002-2350

CVE-2002-2350 involves an XSS vulnerability in Zorum 2.4. The affected code path is z_user_show.php within dbtreelistproperty_method.php, where the classifier parameter can be manipulated to inject arbitrary script or HTML. Exploitation details are not provided beyond the XSS claim; no exploit sp...

CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

XSS bug in Zorum 2.4

Vulnerable systems: Zorum 2.4 Exploit: zusershow.php?method=showuserlink&class=Scriptjavascript:alert document.cookie/Script&rollid=admin&x=3da59a9da8825& without "" Solution: i think that will work , but im not sure open dbtreelistpropertymethod.php and put this code in line 7: $class =...