729 matches found
CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
DEBIAN-CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
CVE-2012-0908
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0908
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
CVE-2012-0908
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0908
CVE-2012-0908 concerns a cross-site scripting (XSS) flaw in SimpleSAMLphp. The vulnerability occurs in logout.php where the link_href parameter is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML. Affected version scope includes 1.8.1 and potentially other vers...
CVE-2012-0908
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0040
CVE-2012-0040 is a cross-site scripting (XSS) vulnerability in SimpleSAMLphp 1.8.1 (and possibly earlier versions before 1.8.2) where an attacker can inject arbitrary script/HTML via the retryURL parameter in modules/core/www/no_cookie.php. Affected software is SimpleSAMLphp; root cause is improp...
CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
CVE-2012-0040
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
CVE-2012-0908
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
CVE-2012-0040: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...
PT-2012-2942
Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.8.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the link href parameter in the logout.php file. Recommendations For...
CVE-2012-0908: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the linkhref parameter...
PT-2012-2258
Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.8.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter in the modules/core/www/no cookie.php file. Recommendations For versio...
SimpleSAMLphp logout.php link_href Parameter XSS
The version of SimpleSAMLphp on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'linkhref' parameter of the 'logout.php' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a malicious...