CVE-2006-5770

Multiple XSS vulnerabilities in ac4p Mobile (CVE-2006-5770) allow remote attackers to inject arbitrary scripts via parameters such as Bloks, Newnews, lBlok, foooot in index.php; Newnews/newmsgs in MobileNews.php; polls.php; send.php; up.php; cp/index.php. Root cause is unsanitized user input in m...

CVE-2006-6389

CVE-2006-6389 and related CVEs describe multiple cross-site scripting (XSS) vulnerabilities in the ac4p Mobile application. The flaws enable remote attackers to inject arbitrary web script or HTML by submitting crafted input to specific parameters: (1) Taaa to up.php and (2) pollhtml and (3) Blok...