|
LinuxSecurity.com: It has been discovered that Slash, the Slashdot Like Automated Storytelling Homepage suffers from two vulnerabilities related to insufficient input sanitation, leading to execution of SQL commands (CVE-2008-2231) and cross-site scripting (CVE-2008-2553).
Original Source: http://www.linuxsecurity.com/content/view/141224?rdf
Learn more about Debian: New slash packages fix multiple vulnerabilities |
