3 matches found
CVE-2011-0050
Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...
CVE-2011-0050
Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...
CGI:IRC XSS issue (CVE-2011-0050)
Michael Brooks Sitewatch discovered an XSS issue in the nonjs interface that allowed HTML injection via a crafted parameter. 0.5.10 is now available. This is actually just 0.5.9 with the following fix: - CVE-2011-0050: XSS in R param in nonjs interface David...