CVE-2009-0933 - Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Mar 17, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.06%

Description

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5
x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/34181
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34036
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0636
vdb-entryx_refsource_VUPENPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0930
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49138
vdb-entryx_refsource_XF

Link	Providers	Tags
http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5		x_refsource_CONFIRMPatchVendor Advisory
http://secunia.com/advisories/34181		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34036		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0636		vdb-entryx_refsource_VUPENPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0930		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49138		vdb-entryx_refsource_XF