HTML Purifier Cross-site Scripting vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2007-3498 · ADVISORY
• ezyang/htmlpurifier commit 96b571d · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/35300 · WEB
• ezyang/htmlpurifier · PACKAGE
• ezyang/htmlpurifier · WEB
• web.archive.org/web/20200228110020/http://www.securityfocus.com/bid/24699 · WEB
• htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS · WEB
• osvdb.org/36722
• securityfocus.com/bid/24699

Lỗ hổng khác của ezyang/htmlpurifier

• CVE-2011-3744TRUNG BÌNH 5.0HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat…
• CVE-2010-4183TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to…
• CVE-2010-2479TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet E…