Cross site scripting in mephisto blog, toendaCMS and chcounter

Thursday, April 12. 2007

Cross site scripting in mephisto blog, toendaCMS and chcounter

Now, once another episode of cross site scripting disclosure. This time we have some free software web applications. Sadly, none of them was able to provide a fix in a decent timeframe.

CVE-2007-1871 XSS in chcounter
CVE-2007-1872 XSS in toendaCMS
CVE-2007-1873 XSS in mephisto
Posted by Hanno Böck in Code, English, Security at 01:35 | Comments (2) | Trackbacks (0)
Defined tags for this entry: , , , ,
Related entries by tags:

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

Wenn du wenigstens nicht immer nach so Kindergarten-Formularen Ausschau halten, sondern dich auch mal an ausgefeilteren Konstruktionen betätigen würdest ... :)
#1 Alex (Homepage) on 2007-04-12 17:44 (Reply)
Naja, das schlimme ist doch, man findet selbst mit den Kindergartenkonstruktionen Vulnerabilities en masse. Aber keine Sorge, ich bin grad schon am planen wie man das ganze weitertreiben könnte, wobei ich mehr in Richtung Skriptautomatisierung denke.

Btw., von Dir kam nun auch schon länger nix mehr ;-)
#1.1 Hanno (Homepage) on 2007-04-12 23:32 (Reply)

Add Comment

E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA
 
 

About me

You can find my web page with links to my work as a journalist at https://hboeck.de/.

You may also find my newsletter about climate change and decarbonization technologies interesting.

Hanno Böck
mail: hanno@hboeck.de

Hanno on Mastodon

Impressum

schokokeks.org

Creative Commons

CC0
Unless noted otherwise, all content is CC Zero / public domain

Show tagged entries

Frontpage
Datenschutz / Privacy