Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2007-6608 (OpenBiblio)

BugsAlert Home > CVE-2007-6608 (OpenBiblio)
 
 

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6608

Learn more about CVE-2007-6608 (OpenBiblio)
 
Tags: cve-2007-6608 openbiblio

Related Items

      CVE-2008-3809 (ios)

      WordPress 2.7: Project Icon

      CVE-2008-3477 (internet_explorer)

      Vuln: Xomol CMS 'index.php' Local File Include Vulnerability

      TROJ_FAKEAV.FB

      FrSIRT - Turbolinux Security Update Fixes Postfix Privilege Escalation Vulnerability

      IBM Hardware Management Console Pegasus CIM Denial of Service

 

Pixel