Cross site scripting

Cross-site scripting XSS vulnerability in askbot 0.7.51-4.el6.noarch...

CVE-2015-3169

Askbot 0.7.51-4.el6.noarch is affected by a cross-site scripting (XSS) vulnerability. The issue stems from inadequate sanitization/filtering of user-submitted input, enabling arbitrary script execution in a victim’s browser when browsing the affected site. Documented impact includes potential coo...

CVE-2015-3169

Cross-site scripting XSS vulnerability in askbot 0.7.51-4.el6.noarch...

CVE-2014-2236

Multiple cross-site scripting XSS vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 tag or 2 user search forms...

CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

Cross site scripting

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 tag or 2 user search forms...

CVE-2014-2236

Multiple cross-site scripting XSS vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 tag or 2 user search forms...

CVE-2014-2235

CVE-2014-2235 is a cross-site scripting (XSS) vulnerability in Askbot prior to 0.7.49. The issue allows remote attackers to inject arbitrary web script or HTML via the question search form. Affected software: Askbot

CVE-2014-2236

Askbot prior to 0.7.49 contains HTML/JS injection (XSS) via the tag and user search forms. Affected component: Askbot web UI input handling. Root cause: improper sanitization in those forms leads to arbitrary script execution in context of the user’s browser. Impact per sources: remote attacker c...

CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

Askbot多个跨站脚本漏洞

1 某些关于问题搜索的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 2 某些关于标签和用户搜索的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Askbot 0.7.49 厂商补丁： Askbot ----- Askbot 0.7.49版本以修复此漏洞，建议用户下载使用： https://askbot.com/...