SiteBar: Multiple issues

Background SiteBar is a PHP application that allows users to store their bookmarks on a web server. Description Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the "dir" parameter CVE-2007-5491, CVE-2007-5694; the translation module also...

CVE-2007-5692

SiteBar 3.3.8 (and related releases) is affected by CVE-2007-5692 among several XSS issues. The vulnerabilities permit remote attackers to inject arbitrary scripts/HTML via multiple parameters (lang, token, nid_acl, uid, target) across integrator.php, New Password, Folder Properties, Modify User,...