PT-2012-5150

Name of the Vulnerable Software and Affected Versions Pebble versions prior to 2.6.4 Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to resolve...

PT-2012-5149

Name of the Vulnerable Software and Affected Versions Pebble versions prior to 2.6.4 Description The issue allows remote attackers to trigger loss of blog-entry viewability via a crafted comment. Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue...

CVE-2012-4022: Undefined Security Weakness

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

CVE-2012-5170

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-5170

Pebble (open-source weblog system) is vulnerable to an open redirect in versions prior to 2.6.4. The flaw allows remote attackers to redirect users to arbitrary external websites, enabling phishing attacks via unspecified vectors. Affected product: Pebble; affected versions: before 2.6.4. Root ca...

CVE-2012-5170

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2012-5818

Name of the Vulnerable Software and Affected Versions Pebble versions prior to 2.6.4 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to...

CVE-2012-5170: Improper Input Validation

Open redirect vulnerability in Pebble before 2.6.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Pebble vulnerable to open redirect

Overview Pebble contains an open redirect vulnerability. Pebble is an open source weblog system. Pebble contains an open redirect vulnerability. Takahisa Kishiya reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

Pebble vulnerable to HTTP header injection

Overview Pebble contains an HTTP header injection vulnerability. Pebble is an open source weblog system. Pebble contains an HTTP header injection vulnerability. Takahisa Kishiya reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Pebble vulnerability where entries may become unviewable

Overview Pebble contains a vulnerability where blog entries may become unviewable due to a specially crafted comment being posted. Pebble is an open source weblog system. Pebble contains an issue in the processing of comments that are posted on blog entries, which may lead to a vulnerability wher...

JVN#55398821: Pebble vulnerable to open redirect

Pebble is an open source weblog system. Pebble contains an open redirect vulnerability. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the software Update to the...

JVN#75492883: Pebble vulnerability where entries may become unviewable

Pebble is an open source weblog system. Pebble contains an issue in the processing of comments that are posted on blog entries, which may lead to a vulnerability where blog entries may become unviewable. Impact A specially crafted comment being posted may cause an arbitrary blog entry to become...

JVN#39563771: Pebble vulnerable to HTTP header injection

Pebble is an open source weblog system. Pebble contains an HTTP header injection vulnerability. Impact Forged information may be displayed on the user's web browser, arbitrary scripts may be executed or arbitrary values may be set for cookies. Solution Update the software Update to the latest...

CVE-2009-0736

Cross-site scripting XSS vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0736

Cross-site scripting XSS vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0736

Pebble prior to 2.3.2 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The condition is a flaw in Pebble’s handling of user-supplied input that leads to script execution in the victim’s browser. ...

CVE-2009-0736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...