oss-security - CVE request (2009): vanilla forums before 1.1.8

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <201010082331.59724.hanno@hboeck.de>
Date: Fri, 8 Oct 2010 23:31:59 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request (2009): vanilla forums before 1.1.8

http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html

Input passed to the 'RequestName' header parameter when posting to 
'/ajax/updatecheck.php' is not sanitized before it is returned to the user. 
This can be exploited to execute arbitrary HTML and script code in a user's 
browser session in context of an affected site.

Please note this should be a CVE-2009 id

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

http://schokokeks.org - professional webhosting

Download attachment "signature.asc " of type "application/pgp-signature" (199 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.