Extrakt Framework 0.7 'index.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31971/info Extrakt Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the brows...

CVE-2008-6217

CVE-2008-6217 describes a cross-site scripting (XSS) vulnerability in Extrakt Framework 0.7 affecting index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the plugins[file][id] parameter. This entry provides the attack vector and impact as described, but doe...