FreeBSD : habari -- XSS Vulnerability (578f6322-c450-11dd-a721-0030843d3802)

Secunia reports : Input passed via the 'habariusername' parameter when logging in is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. %NASLMINLEVEL 70300 C Tenable...

CVE-2008-4601

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

CVE-2008-4601

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

CVE-2008-4601

The CVE-2008-4601 entry documents a Cross-Site Scripting (XSS) vulnerability in Habari CMS 0.5.1, exploitable via the habari_username parameter in the login feature. The issue allows remote attackers to cause arbitrary HTML/script execution in a user’s browser session of an affected site. The tec...

CVE-2008-4601

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

habaricms-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetings to --d3hydr8 -r45c4l -baltazar -sinner01 -C1c4Tr1Z -Gabitzu and all darkc0de members ; Author: swappie aka faithlove Home :...

CVE-2008-4601: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

Habari 0.5.1 - habari_username Cross-Site Scripting

Habari 0.5.1 - habariusername Cross-Site Scripting source: https://www.securityfocus.com/bid/31794/info Habari is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code ...

Habari 0.5.1 - 'habari_username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31794/info Habari is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...