CVE-2007-1611

Cross-site scripting XSS vulnerability in the RSS reader in a certain SOURCENEXT product, probably IKANARI JIJYOU 1.0.0 and 1.0.1, allows remote attackers to inject arbitrary web script or HTML via the title of an article in a feed...

CVE-2007-1611

CVE-2007-1611 pertains to an arbitrary script-execution vulnerability in the RSS readers NewsGlue and Ikinari Jijyoutsuu due to improper handling of RSS feed output. The root cause is failure to sanitize feed content, allowing an attacker to execute arbitrary script when processing the title of a...