CVE-2007-3555 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3555
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3555

Description: Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35239 ST 1018333 SREASON http://securityreason.com/securityalert/2857 SAID Secunia Advisory: SA25929 OSVDB 36366 MISC http://websecurity.com.ua/1045/ http://securityvulns.ru/Rdocument391.html DEBIAN http://www.debian.org/security/2008/dsa-1691 CONFIRM http://tracker.moodle.org/secure/IssueNavigator.jspa?mode=hide&requestId=10252 http://tracker.moodle.org/browse/MDL-10341 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/472727/100/0/threaded BID 24748

Return to the previous page.