Description
common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
References
- 20110601 Post Revolution 0.8.0c Multiple Remote Vulnerabilities mailing-list
- 47967 vdb-entry
- http://javierb.com.ar/2011/06/01/postrev-vunls/
- 8270 third-party-advisory
- http://postrev.com.ar/verpost.php?id_noticia=59