[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 9 Dec 2008 13:55:28 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Cc: Steven Christey <coley@...us.mitre.org>
Subject: CVE request: moodle (XSS)
http://moodle.org/mod/forum/discuss.php?d=108590
Cross Site Scripting (XSS) possible through Wiki page titles
Wiki page names were not sanitised on output, allowing for potential cross
site scripting (XSS) issues.
Versions affected: < 1.6.8, < 1.7.6, < 1.8.7, < 1.9.3
--
Hanno Böck Blog: http://www.hboeck.de/
GPG: 3DBD3B20 Jabber/Mail: hanno@...eck.de
http://www.jukss.de/ Jugemdumweltkongress, 27.12.-4.1.
[ CONTENT OF TYPE application/pgp-signature SKIPPED ]
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
