Skip to content
OpenAdvisories

Archive

15 January 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.3

    ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect

    Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.