medium4.3
CVE-2009-2947
Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI param…
Impact
Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xapian | Omega | through 1.0.15 Versions 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html
- http://secunia.com/advisories/36674
- http://secunia.com/advisories/36693
- http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS
- http://www.debian.org/security/2009/dsa-1882
- http://www.securityfocus.com/bid/36317
- http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html
- http://secunia.com/advisories/36674
- http://secunia.com/advisories/36693
- http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS
- http://www.debian.org/security/2009/dsa-1882
- http://www.securityfocus.com/bid/36317