| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
kronolith2: cross-site scripting
| Package(s): | kronolith2 | CVE #(s): | CVE-2008-1974 | |||||||||
| Created: | April 28, 2008 | Updated: | June 11, 2008 | |||||||||
| Description: | From the Debian advisory: "The-0utl4w" discovered that the Kronolith, calendar component for the Horde Framework, didn't properly sanitise URL input, leading to a cross-site scripting vulnerability in the add event screen. | |||||||||||
| Alerts: |
| |||||||||||
(Log in to post comments)