CVE-2008-6879

Currently unrated

Key Information:

Vendor
Apache
Status
Roller
Vendor
CVE Published:
30 July 2009

Summary

Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action.

References

http://secunia.com/advisories/31523
third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/51151
vdb-entryx_refsource_OSVDB
http://svn.apache.org/viewvc?view=rev&revision=668737
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.