Unscored CVE-2009-4347 EUVD-2009-4315GHSA-6j3c-g3mp-922r

Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject ar…

Published Dec 17, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.

References

37751 third-party-advisory
20091215 Daloradius XSS Vulnerability mailing-list
http://packetstormsecurity.org/0912-exploits/daloradius-xss.txt