Skip to content
OpenAdvisories

Archive

October 2008

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    Plone Cross-site Scripting vulnerability in the LiveSearch module

    Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG ta…

  • Medium 6.5
    CVE-2008-3474 EPSS 28%

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…