SecuritySpace - CVE-2010-4607

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-4607

Description: Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4607
http://www.exploit-db.com/exploits/15799
http://www.htbridge.ch/advisory/xss_vulnerability_in_habari.html
http://www.htbridge.ch/advisory/xss_vulnerability_in_habari_1.html
http://secunia.com/advisories/42688

CVE ID:	CVE-2010-4607
Description:	Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4607 http://www.exploit-db.com/exploits/15799 http://www.htbridge.ch/advisory/xss_vulnerability_in_habari.html http://www.htbridge.ch/advisory/xss_vulnerability_in_habari_1.html http://secunia.com/advisories/42688