Cross site scripting in mephisto blog, toendaCMS and chcounter

Thursday, April 12. 2007

Cross site scripting in mephisto blog, toendaCMS and chcounter

Now, once another episode of cross site scripting disclosure. This time we have some free software web applications. Sadly, none of them was able to provide a fix in a decent timeframe.

CVE-2007-1871 XSS in chcounter
CVE-2007-1872 XSS in toendaCMS
CVE-2007-1873 XSS in mephisto

Posted by Hanno Böck in Code, English, Security at 01:35 | Comments (2) | Trackbacks (0)

Defined tags for this entry: chcounter, mephisto, security, toendacms, xss

Related entries by tags:

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

Wenn du wenigstens nicht immer nach so Kindergarten-Formularen Ausschau halten, sondern dich auch mal an ausgefeilteren Konstruktionen betätigen würdest ... :)

#1 Alex (Homepage) on 2007-04-12 17:44 (Reply)

Naja, das schlimme ist doch, man findet selbst mit den Kindergartenkonstruktionen Vulnerabilities en masse. Aber keine Sorge, ich bin grad schon am planen wie man das ganze weitertreiben könnte, wobei ich mehr in Richtung Skriptautomatisierung denke.

Btw., von Dir kam nun auch schon länger nix mehr ;-)

#1.1 Hanno (Homepage) on 2007-04-12 23:32 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	E-Mail addresses will not be displayed and will only be used for E-Mail notifications. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above:
	Remember Information? Subscribe to this entry

Cross site scripting in mephisto blog, toendaCMS and chcounter

Thursday, April 12. 2007

Cross site scripting in mephisto blog, toendaCMS and chcounter

About