Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

flyspray: missing input sanitizing

Package(s):

flyspray

CVE #(s):

CVE-2005-3334

Created:

January 24, 2006

Updated:

January 25, 2006

Description:

Several cross-site scripting vulnerabilities have been discovered in flyspray, a lightweight bug tracking system, which allows attackers to insert arbitrary script code into the index page.

Alerts:

Debian

DSA-953-1

2006-01-24

(Log in to post comments)