Cross site scripting

2007-07-1019:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page.

CPENameOperatorVersion
dotcleareq1.2.6

CPE	Name	Operator	Version
	dotclear	eq	1.2.6

References

ar3av.free.fr/faille-dotclear.php

osvdb.org/43958

secunia.com/advisories/25971