[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack
- From: addmimistrator@xxxxxxxxx
- Date: 21 Feb 2006 00:52:20 -0000
Hello Everybody
???Summary???
Software: CuteNews
Sowtware?s Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
??-Description??-
There is a security bug in CuteNews version 1.4.1 that allows malicious people to perform an XSS attack
Full Advisory:
http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
greatz to roozbeh afrasiabi:black_death
- Prev by Date: [USN-256-1] bluez-hcidump vulnerability
- Next by Date: The New Face of Phishing
- Previous by thread: [USN-256-1] bluez-hcidump vulnerability
- Next by thread: The New Face of Phishing
- Index(es):
Relevant Pages
|
