CVE-2009-0359

Multiple cross-site scripting XSS vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 message title or 2 user full name...

CVE-2009-0359

CVE-2009-0359 affects Samizdat prior to 0.6.2. The vulnerability is an XSS due to failure to escape HTML in two user-supplied fields: message title and user full name, enabling remote authenticated users to inject script/HTML. The issue is documented across multiple sources, including NVD and OSV...

Samizdat 0.6.1 Cross Site Scripting

Software: Samizdat, an open publishing web application written in Ruby Vulnerability: cross-site scripting Vulnerable Versions: 0.6.1 and earlier Non-vulnerable Versions: 0.6.2, Debian package 0.6.1-3lenny1 Patch: http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch...