|
|
| |
|
| |
sitebar: multiple vulnerabilities
| Package(s): | sitebar |
CVE #(s): | CVE-2007-5491
CVE-2007-5694
CVE-2007-5492
CVE-2007-5693
CVE-2007-5695
CVE-2007-5692
|
| Created: | November 7, 2007 |
Updated: | December 7, 2007 |
| Description: |
Tim Brown discovered these multiple issues: the translation module does
not properly sanitize the value to the "dir" parameter (CVE-2007-5491,
CVE-2007-5694); the translation module also does not sanitize the
values of the "edit" and "value" parameters which it passes to eval()
and include() (CVE-2007-5492, CVE-2007-5693); the log-in command does
not validate the URL to redirect users to after logging in
(CVE-2007-5695); SiteBar also contains several cross-site scripting
vulnerabilities (CVE-2007-5692).
|
| Alerts: |
|
( Log in to post comments)
|
|
|