CVE-2010-3462

Cross-site scripting XSS vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the confirm parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3462

Mollify is affected by a Cross-site Scripting (XSS) vulnerability in backend/plugin/Registration/index.php, affecting Mollify 1.6 and 1.6.5.5 (and possibly other versions). The issue allows an attacker to inject arbitrary script/HTML via the confirm parameter. OpenVAS entries describe the flaw as...

Mollify 1.6 Cross Site Scripting

------------------------------------------------------------------------ Software................Mollify 1.6 Vulnerability...........Reflected Cross-site Scripting Download................http://freshmeat.net/projects/mollify Release Date............9/15/2010 Tested On...............Windows Vista...

Mollify 1.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43262/info Mollify is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary JavaScript code in the browser of an unsuspecting user in the contex...