Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) login_data parameter to admin/auth.php; (2) nb parameter to admin/blogs.php; (3) type, (4) sortby, (5) order, or (6) status parameters to admin/comments.php; or (7) page parameter to admin/plugin.php.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2012-03-19T19:00:00
Updated: 2018-01-10T20:57:01
Reserved: 2012-02-09T00:00:00
Link: CVE-2012-1039
JSON object: View
NVD Information
Status : Modified
Published: 2012-03-19T19:55:03.937
Modified: 2018-01-11T02:29:03.527
Link: CVE-2012-1039
JSON object: View
Redhat Information
No data.
CWE