CVE-2007-5648

Summary

Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) d or the (2) u parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.lezr.com/exploits/id/84
• http://secunia.com/advisories/27404
• http://www.securityfocus.com/bid/26140
• http://osvdb.org/38204

References

• http://www.lezr.com/exploits/id/84
• http://secunia.com/advisories/27404
• http://www.securityfocus.com/bid/26140
• http://osvdb.org/38204

• ←Previous
• Next→