28 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...
CVE-2008-0751
Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...
CVE-2008-0751
Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...
CVE-2008-0751
CVE-2008-0751 : Cross-site scripting in the Freetag before 2.96 plugin for S9Y Serendipity. When using Internet Explorer 6/7, an attacker can inject arbitrary script/HTML via PATH_INFO to plugin/tag/. Root cause is an XSS vulnerability in the plugin handling PATH_INFO. Affected: Freetag plugin (v...
[Full-disclosure] Serendipity Freetag-plugin XSS vulnerability
Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...
S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting
S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an...
S9Y Serendipity Freetag-plugin 2.95 - 'style' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to laun...
serendipityfreetag-xss.txt
Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...