CVE-2008-0751

Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...

serendipityfreetag-xss.txt

Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an...

S9Y Serendipity Freetag-plugin 2.95 - 'style' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to laun...