4 matches found
[SECURITY] [DLA 453-1] extplorer security update
Package : extplorer Version : 2.1.0b6+dfsg.3-4+deb7u2 CVE ID : CVE-2015-0896 Debian Bug : 783231 Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Debian DLA-296-1 : extplorer security update
Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has...
[SECURITY] [DLA 296-1] extplorer security update
Package : extplorer Version : 2.1.0b6+dfsg.2-1+squeeze3 CVE ID : CVE-2015-0896 Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0896
CVE-2015-0896 affects eXtplorer, a PHP/JavaScript-based file manager. Multiple XSS vulnerabilities exist in versions before 2.1.7, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is documented across multiple advisories (e.g., Debian DLA-296-1/4...