CVE-2005-4494

SPIP 1.8.2 and earlier exposes a cross-site scripting (XSS) vulnerability. According to the CVE record, remote attackers can inject arbitrary web script or HTML via unspecified parameters to spip_login.php3 and spip_pass.php3. The affected software is SPIP (content management system), but the des...

CVE-2005-4494: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 spiplogin.php3 and 2 spippass.php3...

SPIP XSS vuln.

SPIP XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/spip-xss-vuln.html vendor: http://www.spip.net/en affected version:1.8.2 and prior Product Description: SPIP is a publishing system developed by the minirezo to manage the site uZine. ...