CVE-2008-7017

Cross-site scripting XSS vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN CommonName field in the subject of an X.509 certificate...

CVE-2008-7017

The CVE-2008-7017 entry describes a cross-site scripting (XSS) vulnerability in the analyse.php component of CAcert (notably versions around 20080921 up to before 20080928). The root cause is the injection of arbitrary web script/HTML via the CN (CommonName) field in the subject of an X.509 certi...

CVE-2008-7017

Cross-site scripting XSS vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN CommonName field in the subject of an X.509 certificate...

CVE-2008-7017

creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32443...

CVE-2006-7017

CVE-2006-7017 involves multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1, triggered when an attacker supplies a URL in the admin_template_path parameter to various admin scripts (e.g., app_change_email.php, app_change_pwd.php, index.php, etc.). The underlying issue is unvalidated...