Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

cgiirc: cross-site scripting

Package(s):

cgiirc

CVE #(s):

CVE-2011-0050

Created:

February 10, 2011

Updated:

February 16, 2011

Description:

From the Debian advisory:

Michael Brooks (Sitewatch) discovered a reflective XSS flaw in cgiirc, a web based IRC client, which could lead to the execution of arbitrary javascript.

Alerts:

Debian

DSA-2158-1

2011-02-09

(Log in to post comments)