Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
References
Link | Resource |
---|---|
http://www.gulftech.org/?node=research&article_id=00086-06292005 | Exploit Patch Vendor Advisory |
http://www.xoops.org/modules/news/article.php?storyid=2383 | Patch |
http://secunia.com/advisories/15843 | |
http://marc.info/?l=bugtraq&m=112006318512991&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-07-04 21:00
Updated : 2016-10-17 20:25
NVD link : CVE-2005-2112
Mitre link : CVE-2005-2112
JSON object : View
CWE
Products Affected
xoops
- xoops