CVE-2007-6205

Related Files

Debian Linux Security Advisory 1528-1

Posted Mar 24, 2008

Authored by Debian | Site debian.org

Debian Security Advisory 1528-1 - Peter Huwe and Hanno Boeck discovered that Serendipity, a weblog manager, did not properly sanitise input to several scripts which allowed for cross site scripting.

tags | advisory, xss

systems | linux, debian

advisories | CVE-2007-6205, CVE-2008-0124

SHA-256 | 8b7a5884ad63c22596a7bb066cab316ce9b42d0c0b7f165a02256cd5357ff4aa

Download | Favorite | View

serendipity-xss.txt

Posted Dec 11, 2007

Authored by Hanno Boeck | Site hboeck.de

The Serendipity blog system contains a plugin to display the content of feeds in the sidebar (serendipity_plugin_remoterss). If an attacker can modify the RSS feed, it is possible to inject javascript code in the link part, because it is not correctly escaped. Versions below 1.2.1 are affected.

tags | exploit, javascript, xss

advisories | CVE-2007-6205

SHA-256 | 532a5907669cbc68a7275efbcc42fe90f3ef0ef37fef8ab43b25ea77019e9b13

Download | Favorite | View