CVE-2009-1845

Description

References

• gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html · Exploit
• lussumo.com/community/discussion/9524/vanilla-118-released · Patch
• secunia.com/advisories/35234 · Vendor Advisory
• securityfocus.com/archive/1/503847/100/0/threaded

vanilla 的其他漏洞

• CVE-2010-1337高危 7.5Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allo…
• CVE-2008-3874低危 3.5Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users t…
• CVE-2008-3760中危 4.3Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the auth…
• CVE-2008-3759高危 7.5Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack ve…
• CVE-2008-3758中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web …