CVE-2008-1792

Cross-site scripting XSS vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1792

CVE-2008-1792 affects the Flickr module for Drupal (5.x up to 5.x-1.3; 6.x up to 6.x-1.0-alpha). The vulnerability is a cross-site scripting (XSS) issue in the insertion filter, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The core cause is the inserti...

CVE-2008-1792: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-2008-022 - Flickr - Cross site scripting

The Flickr module allows one to access photos on one's site via the Flickr API. The module provides a filter for inserting photos and photosets and blocks for a user's recent photos and photosets. Several values are displayed without being escaped, which enables users to inject arbitrary HTML and...