exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2009-265

Posted Oct 12, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-265 - The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols. This update fixes this vulnerability.

tags | advisory, remote, php, protocol, xss

systems | linux, mandriva

advisories | CVE-2008-1502

SHA-256 | 36a689eb68f1cedd3c16715e45a27e48b89433e55d508e9574667141eb5eb607

Download | Favorite | View

Related Files

No related files