CVE-2008-4120

Multiple cross-site scripting XSS vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 pass parameter to login.php, or the 3 name parameter to contact.php...

CVE-2008-4120

Summary of CVE-2008-4120 (FlatPress 0.804 XSS): Multiple cross-site scripting vulnerabilities allow remote attackers to inject arbitrary JavaScript/HTML through the login.php parameters (user, pass) or the contact.php name parameter. The flaw arises in FlatPress 0.804, enabling script injection t...

flatpress-xss.txt

Cross Site Scripting XSS Vulnerabilitiy in flatpress 0.804, CVE-2008-4120 References http://www.datensalat.eu/fabian/cve/CVE-2008-4120-flatpress.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4120 http://www.flatpress.org/ Description FlatPress is an open-source standard-compliant...