CVE-2009-4497

The CVE-2009-4497 entry is grounded in LXR Cross Referencer (lxr-cvs) web frontend, where Debian and OpenVAS/NVL references confirm a vulnerability caused by missing input sanitization. The issue enables cross-site scripting (XSS) via crafted input and affects lxr-cvs versions around 0.9.5/0.9.6 ...

CVE-2010-1625

CVE-2010-1625 is tied to the lxr-cvs project (Debian DSA-2092-1). The issue is a remote cross-site scripting (XSS) vulnerability caused by insufficient input sanitizing in the code-indexing tool with a web frontend. An attacker could inject script code via user-supplied input processed on the sea...

CVE-2010-1448

CVE-2010-1448 is a cross-site scripting (XSS) vulnerability in the LXR Cross Referencer. The flaw resides in the file lib/LXR/Common.pm and affects versions prior to 0.9.8 . An attacker can inject arbitrary web script/HTML by exploiting a string in the search page’s TITLE element. This entry is r...