Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=112006318512991&w=2 - | |
References | () http://secunia.com/advisories/15843 - | |
References | () http://www.gulftech.org/?node=research&article_id=00086-06292005 - Exploit, Patch, Vendor Advisory | |
References | () http://www.xoops.org/modules/news/article.php?storyid=2383 - Patch |
Information
Published : 2005-07-05 04:00
Updated : 2024-11-20 23:58
NVD link : CVE-2005-2112
Mitre link : CVE-2005-2112
CVE.ORG link : CVE-2005-2112
JSON object : View
Products Affected
xoops
- xoops
CWE