← voltar
CVE-2008-1468

CVE-2008-1468

EPSS 1.7%
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444http://jvn.jp/jp/JVN%2300892830/index.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlhttp://marc.info/?l=bugtraq&m=127239985506823&w=2http://secunia.com/advisories/29386http://secunia.com/advisories/29561http://secunia.com/advisories/31687http://secunia.com/advisories/39645https://exchange.xforce.ibmcloud.com/vulnerabilities/41360https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00575.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-March/msg00654.htmlhttp://www.namazu.org/security.html.en