CVE-2008-1502 - CVE Reference - Advisories

CVE Reference: CVE-2008-1502

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1502

Description: The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in eGroupWare before 1.4.003 allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41435 SAID Secunia Advisory: SA29491 MISC http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110 CONFIRM http://www.egroupware.org/changelog BID 28424

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Blender Multiple Temporary File Security Issues

2.	Kostenloses Linkmanagements cript Multiple Vulnerabilities

3.	Linux Kernel Multiple Vulnerabilities

4.	GForge Insecure Temporary Files

5.	Microsoft Windows WMF "SETABORTPROC" Arbitrary Code Execution

6.	68 Classifieds "cat" SQL Injection Vulnerability

7.	Debian update for gforge

8.	Model Search "cat" SQL Injection Vulnerability

9.	Symantec Altiris Deployment Solution Multiple Vulnerabilities

10.	Interspire ActiveKB Admin Interface Cookie Security Bypass