flatpress-xss.txt

Cross Site Scripting XSS Vulnerabilitiy in flatpress 0.804, CVE-2008-4120 References http://www.datensalat.eu/fabian/cve/CVE-2008-4120-flatpress.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4120 http://www.flatpress.org/ Description FlatPress is an open-source standard-compliant...

CVE-2007-4120

CVE-2007-4120 affects Jelsoft vBulletin 3.6.5: multiple PHP remote file inclusion vulnerabilities in includes/functions.php (classfile), includes/functions_cron.php (nextitem), and includes/functions_forumdisplay.php (specialtemplates). The underlying cause is insecure URL handling that could all...

CVE-2006-4120

Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4120

The CVE-2006-4120 entry documents a cross-site scripting (XSS) vulnerability in Drupal’s Recipe module (recipe.module) prior to version 1.54, affecting Drupal 4.6 and earlier. The underlying issue is an XSS flaw in the Recipe module that allows remote attackers to inject arbitrary web scripts or ...