oss-security - Re: CVE request (2009): vanilla forums before 1.1.8

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1767961964.157141286825379393.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 11 Oct 2010 15:29:39 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request (2009): vanilla forums before 1.1.8


----- "Hanno Böck" <hanno@...eck.de> wrote:

> http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html
> 
> Input passed to the 'RequestName' header parameter when posting to
> '/ajax/updatecheck.php' is not sanitized before it is returned to the
> user.  This can be exploited to execute arbitrary HTML and script code in
> a user's browser session in context of an affected site.
> 
> Please note this should be a CVE-2009 id
> 

Steve,

Can MITRE take this one.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.