Description
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/370855 ↗
- http://secunia.com/advisories/12231 ↗
- http://echo.or.id/adv/adv02-y3dips-2004.txt ↗
- http://securitytracker.com/id?1010864 ↗
- http://www.securityfocus.com/bid/8506 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13041 ↗
- http://www.securityfocus.com/bid/10856 ↗