Secunia
Login
|
|
CVE Reference: CVE-2008-3326 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-3326 |
|
|
Description: Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title). |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/43961 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html SAID Secunia Advisory: SA31196 Secunia Advisory: SA31339 MISC http://www.procheckup.com/Vulnerability_PR08-13.php MILW0RM http://www.milw0rm.com/exploits/6653 DEBIAN http://www.debian.org/security/2008/dsa-1691 CONFIRM http://moodle.org/mod/forum/discuss.php?d=101401 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/494656/100/0/threaded BID 30348 |
|
| Return to the previous page. |
