CVE-2007-6461

NONE

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index ac

发布于: 12/20/2007更新于: 4/9/2025
在NVD查看在MITRE查看

描述

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function.

AI分析AI驱动

受影响产品

flysprayflyspray
0.9.9
flysprayflyspray
0.9.9.1
flysprayflyspray
0.9.9.2
flysprayflyspray
0.9.9.3

参考资料