Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

sitebar: missing input validation

Package(s):

sitebar

CVE #(s):

CVE-2006-3320

Created:

August 1, 2006

Updated:

August 2, 2006

Description:

A cross-site scripting vulnerability has been discovered in sitebar, a web based bookmark manager written in PHP, which allows remote attackers to inject arbitrary web script or HTML.

Alerts:

Debian

DSA-1130-1

2006-07-30

(Log in to post comments)