2 matches found
Apache CouchDB < 1.0.2 Futon Admin Interface XSS
According to its banner, the version of CouchDB running on the remote host is affected by a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied input before it is used in the Futon admin interface. A remote attacker could exploit this to execute arbitrary...
CouchDB < 0.11.2 Futon Admin Interface Cross-Site Request Forgery
Binary data 5642.prm...