Tracker: Bugs
5
few security vulnerabilities - ID: 1188735
Last Update: Comment added ( xushi )
in 0.7.4:
The blog entry title field seems prone to cross site scripting (XSS)
attacks.
The blog/comment body text seems prone to XSS as well.
In the index.php script, the postid variable seems prone to SQL injection
attacks.
jericho+bblog@attrition.org
Nobody/Anonymous ( nobody ) - 2005-04-23 21:30
5
Open
None
Nobody/Anonymous
None
0.7-cvs
Public
Comment ( 1 )
|
Date: 2005-05-30 14:03 Logged In: YES |
Log in to comment.
Attached File
No Files Currently Attached
Change
No changes have been made to this artifact.
About SourceForge
Develop Software
Community
Copyright © 2010 Geeknet, Inc. All rights reserved. Terms of Use
