[SECURITY] Fedora 8 Update: blam-1.8.3-20.fc8

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 9 Update: blam-1.8.5-4.fc9.1

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-5.fc9

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-3.fc10

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 10 Update: blam-1.8.5-5.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

cups security update

1.2.4-11.18:.3 - Applied patch to fix RSS subscription limiting bug 473901, CVE-2008-5183...

WordPress wp-includes/feed.php self_link() Function Host Header RSS Feed XSS

The version of WordPress installed on the remote host fails to properly sanitize input to the 'Host' request header before using it in the 'selflink' function in 'wp-includes/feed.php' to generate dynamic HTML output. An attacker can leverage this issue to inject arbitrary HTML and script code in...

FreeBSD : wordpress -- header rss feed script insertion vulnerability (622bc638-be27-11dd-a578-0030843d3802)

Secunia reports : Input passed via the HTTP 'Host' header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed. %NASLMINLEVEL 70300 C Tenable Network...

Cross site scripting

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

DEBIAN-CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

CVE-2008-5278

WordPress CVE-2008-5278 affects the RSS Feed Generator (wp-includes/feed.php) prior to 2.6.5, enabling remote injection of HTML/script via HTTP_HOST. The issue is caused by unsanitized Host header, resulting in XSS in the RSS feed. Remediation: upgrade WordPress to 2.6.5 or later (per the descrip...

CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

CVE-2008-5278

Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...

WordPress RSS Feed Generator Plugin <= 2.6.4 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the Host header. Solution Update the plugin...

WordPress XSS vulnerability in RSS Feed Generator

===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith [email protected] Published: 2008/11/25 Affected: WordPress 2.6.5 Summary ======= WordPress prior to v2.6.3 fails to sanitize the Host header variable correctly when generating R...

wordpress -- header rss feed script insertion vulnerability

Secunia reports: Input passed via the HTTP "Host" header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed...

wordpressrss-xss.txt

===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith Published: 2008/11/25 Affected: WordPress tag in ATOM and RSS 2.0 feeds: function selflink echo 'http' . $SERVER'https' == 'on' ? 's' : '' . '://' . $SERVER'HTTPHOST'...