Cross-Site Scripting Vulnerability in LXR Cross Referencer by SourceForge
CVE-2009-4497

Currently unrated

Key Information:

Vendor

Malcom Box

Status
Lxr Cross Referencer
Vendor
CVE Published:
7 January 2010

What is CVE-2009-4497?

The LXR Cross Referencer versions 0.9.5 and 0.9.6 contain a Cross-Site Scripting (XSS) vulnerability which allows attackers to inject arbitrary web scripts or HTML. This is exploited via the 'i' parameter to the ident program, potentially compromising user sessions or data integrity. Proper input validation and sanitization practices should be implemented to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://sourceforge.net/mailarchive/message.php?msg_name=E...
mailing-listx_refsource_MLIST
http://secunia.com/advisories/38117
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.