Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ipplan: cross-site scripting

Package(s):

ipplan

CVE #(s):

CVE-2009-1732

Created:

July 6, 2009

Updated:

July 8, 2009

Description:

From the Debian advisory:

It was discovered that ipplan, a web-based IP address manager and tracker, does not sufficiently escape certain input parameters, which allows remote attackers to conduct cross-site scripting attacks.

Alerts:

Debian

DSA-1827-1

2009-07-06

(Log in to post comments)