Skip to content
OpenAdvisories
Unscored DSA-2387-1 2 CVEs

simplesamlphp - cross site scripting

Published Jan 11, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 simplesamlphp 1.6.3-3

Vulnerabilities 2

  • Unscored —
    CVE-2012-0040

    Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other ve…

    simplesamlphp Debian
  • Unscored —
    CVE-2012-0908

    Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 …

    simplesamlphp Debian