Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins.
References
Link | Resource |
---|---|
http://sourceforge.net/project/shownotes.php?release_id=328092 | |
http://www.osvdb.org/16660 | Patch |
http://www.osvdb.org/16661 | Vendor Advisory |
http://secunia.com/advisories/15405 | Patch |
Configurations
Information
Published : 2005-05-23 21:00
Updated : 2008-09-05 13:49
NVD link : CVE-2005-1713
Mitre link : CVE-2005-1713
JSON object : View
CWE
Products Affected
s9y
- serendipity