| Package | Affected versions | Patched versions |
|---|---|---|
| namazu | = 1.3.0.11= 2.0= 2.0.12= 2.0.13= 2.0.14= 2.0.15= 2.0.16= 2.0.2≤ 2.0.17 |
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free